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Section I 

INTRODUCTORY REMARKS 

Paragraph 


Rdsiim6 of preceding information______ 1 

Sequence of study....... 2 


1. Resume of preceding information.— a. In Special Text No. 
165 (1935), Elementary Military Glyptography, the student was 
given Iris first introduction to the study of the more simple means 
and methods of secret writing. Considerable attention was devoted 
to certain preliminary data in the nature of definitions of basic terms 
employed in cryptography and of the general circiunstances surround¬ 
ing the use of cryptography in militaiy communications. The factors 
determining the influence or effect that the analysis of military 
cryptograms will have on the tactical situation were discussed some¬ 
what in detail, and it was shown that of these factors the most im¬ 
portant is the degree of cryptographic security inherent in the cryp- 
tograpliic system itself. This was then discussed in detail in con¬ 
nection with related factors involved in the length of time requii-ed to 
solve military cryptograms. Attention was also directed to infor¬ 
mation bearing upon the employment of cryptography in our Army, 
and the functions, duties, and responsibilities of the various arms and 
services concerned in it were set forth. Commg then to a discussion 
of certain preliminary details of a practical nature, it was shown that 
systems suitable for the militaiy use must conform to certain more 
or less rigid requirements before they can even bo considered for such 
use because of the present-day limitations of the ai't of signal com¬ 
munication in general. 

b. Having assimilated all the foregoing data of an intinductory 
nature, the student then took up the study of the two principal classes 
of cryptograms: transposition and substitution. Various examples 
of cipher systems of the transposition class were first illustrated, these 
starting out with the simplest varieties of monoUteral route trans¬ 
position and then progressing tlu’ough more complex types of simple 
columnar and keyword columnar metliods. Only a liint was con¬ 
veyed as to the existence of far more complicated double and triple 
transposition systems. The principal disadvantages of transposition 
methods in general were discussed. Then substitution systems were 
taken up and after a brief discussion of the nature of alphabets in 
general and of the lands of cipher alphabets in particular, a few 
examples of simple monoalphabetic substitution ciphers were given. 

( 1 ) 






Methods of producing mixed alphabets were illustrated, and the use of j 
sliding basic sequences to derive a set of secondary alphabets J 
described. Cases of monoalphabetic substitution with variants were J 
presented and their disadvantages from the point of view of crypto^ i 
graphic security were discussed. It was stated that despite a miilti^ M 
plicity of values for cipher equivalents, such methods do not yield J 
cryptograms of a high degree of security, and for this reason othor m 
methods of producing a multiplicity of values, based upon true poly-- m 
alphabetic methods, are more satisfactory. The use of cipher disfe % 
and cipher tables of various sorts was discussed in connection with J 
more complicated types of substitution, and their disadvantages M 
pointed out. Mention was made of methods of increasing the degree M 
of cryptographic security by supj)ressing or eliminating the manifest » 
tations of periodicity in polyal[)habctic systems based upon the use * 
of a repeating key. These led to a consideration of the development 
and use of cryptographs and cipher machines, a few of which were ] 
merely mentioned. 1 

c. The category of substitution methods under the heading of code 
systems was then discussed and examples of the various types of code 
words and codebook arrangements given. The discussion included a 
comparison of the advantages and disadvantages of cipher and code 
methods from the point of view of simplicity, rapidity, practicability, 
secrecy, accuracy, and economy. Considerable attention was devoted 
to the secrecy requii-ernents of a cryptographic system for military use. 

d. There then followed a brief discussion of the errors which are J 
almost inevitable in cryptographic communication, and of methods for 
their suppression and elimination. Finally, a summary of the funda- 
mental rules for safeguarding cryptograms was i)resented. 

e. With the foregoing as a background, a review of whicli is rccoiu- Jf 
mended, the student is in a position now to take up the study of more • 
advanced cryptographic methods. Special emphasis is to be laid I 
^uly upon such systems as are practicable for military use. It is M 
Necessary to add, however, that cryptography is by no means a static % 
art or science and that viewpoints are always undergoing change; 
what is regarded as wholly impracticable today may, through some 
unforeseen improvement in technique, become feasible tomorrow, 

and it is unwise to condemn a system too hastily. For example, before 
t le World War, and indeed for the lirst two years of that conflict, 
m use of codebooks in the theater of op(‘rations was I’egarded as 
™P^^mable.^ Colonel Hitt in his MaiiuaL jor the Solution of 
_ Ci phers, published in 1916, says: 

^See, in this connection, Friedman, William F., American Army Field Codes in 
^^orces During the First World IFar, Signal Security 
ice 1 ublication, OCSigO, War Department, Washington, 1942. 
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The necessity for exact expression of ideas practically excludes the use of codes 
for military work, although it is possible that a special tactical code might be 
useful for preparation of tactical orders. 

Also, in an official British Army Manual of Cryptography prepared 
in 1914 is found the following statement: 

Codes will first be considered, but as they do not fulfill the conditions required 
of a means of secret communication in the field, they need not be dealt with here 
at length. 

In the 1935 edition of this text the foregoing quotations were im¬ 
mediately succeeded by the following comment: 

It need only be pointed out in this connection that today code methods pre¬ 
dominate in the secret communication systems of the military, naval, and dip¬ 
lomatic services of j)ractically all the large nations of the world. Nevertheless, 
it is likely that within the next decade or two the pendulum may once more 
swing over to the other position and cii)hcr methods may again come to the fore, 
especially if mechanical and electrical ciidier machines are perfected so that their 
operation becomes practicable for general use. It is for this reason, if for no other, 
that the cryptographer who desires to keep abreast of progress must devote con¬ 
siderable attention to the more complicated cipher methods of the past and present 
time, for with the introduction of mechanical and electrical devices the complexi¬ 
ties and difficulties of these hand-operated methods may be eliminated. 

In preparing tliis revision (1943) the author finds it necessary to say 
that the forecast he made in 1935 in regard to the rebirtli of cipher 
methods has been fully justified by the present trend, which is in a 
direction away from code and toward cipher methods, because of 
important advances made in the field of mechanical and electrical 
cryptographic devices and mechanisms. 

/. It may be added, too, that modern electrical communication 
methods and instrumentalities are finding an increasing need for 
applications of cryj^tographic theory and practice to their efficacious 
operation. For example, in very recent years there has devdoped a 
distinct need for secure methods and means for distorting voice com¬ 
munications by teleplione or radiophone, and for distorting facsimile 
transmissions l)y wire or radiotelegraphy. Teleprinter services per¬ 
mitting direct cryptographic intercommunication by machines opei- 
ated from a typewriter keyboard make it desirable to have means 
whereby, although the keyboard is o])erated to correspond to plain¬ 
text characters, the latter are instantaneously and automatically 
enciphered in transmission and the received signals are instantane¬ 
ously and automatically deciphered upon reception at the distant end. 
Thus the printing mechanism at the receiving station records the 
original plain-text characters set uj) on the keyboard at the sending 
station but interception of the signals passing over the line or by 
radio would yield only cipher text. 

g. It is difficult to foresee the specific cryptographic methods 
which might some day be useful in connection with developments of 
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structed. For this purpose cross-section paper will be found useful. 
The analysis of such a cryptogram is somewhat complicated by the 
presence of columns having varying numbers of letters; it may be 
further complicated by following complex routes in inscription. It is 

B/ ^ 1/ Ti/ G/ k/ X 

F /I / V /E /H / U /K 

E/D/D/A/ S/ H/ L/ H/ A/'a 

B /R/O /K /E/N/D/O/W/N /s 






NOCANDIFORISS0E 

Figure l 

also possible to follow a numerical key in the inscription of the plain 
text in horizontal lines; this additional procedure would further 
complicate and delay solution. 

5. Triangular designs.— a. The simplest way of drawing up a 
triangle for cryptographing is to take cross-section paper, draw a 
square the side of which is equal 
to the length agreed upon as ex¬ 
pressed in the number of cells, and 
then draw a diagonal cutting the 
large square into two equal tri¬ 
angles. This is shown in Figure 
2, where the length agreed upon 
is nine, i. e., nine cells per side. 

The letters of the plain text are 
inscribed in accordance with any 
prearranged route, the one illus¬ 
trated in Figure 3 being a simple 
^ethod wherein the letters arc 
inscribed in horizontal lines in the 
normal manner. When so in¬ 
scribed, the letters in the dia- 

gram wll form 2n-l columns whore n is the number of cells fonning 
one of the sides of the square from which the triangle has been 
onstructed. The total number of letters that can be inscribed wthin 
lie tnangle is the sum of n+(n—l) + (n-2) + (n~3)+ 4-1 

^ sum is 94-8+7+0 + 

+ +3+2+1 _45. The letters may then be transcribed to form the 



W- 
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cryptogram by following another route, or by following a derived 
numerical key applied to the base of the triangle. A simple method of 
deriving a key of 2n — 1 elements from a key of n elements or letters 
is exemplified herewith. Let the key be DIAGONALS, a word of 
nine letters. Extend this key to 2a — 1 places by repetition, and 
then assign numerical values as usual: 

71=9; 271-1 = 17 

1-2-3-4—5—6-7—8—9-10-11-12-13-14-15-16-17 
Keyword: DIAGONALSDIAGONA L 

Numerical key: 5-9-1-7-15-13-2-11-17—6-10—3—8-16-14—4-12 

This numerical key is the one that has been employed in enciphering 
the message in Figure 3. 



Cryptogram: 

RICRC OCSGE DOONI UAOOE 
SEYID RTISS DTSNR AUNTN 
PERTR 

Figure 3. 

h. By a slight change in procedure it is possible to encipher a mes¬ 
sage and produce a text which, for the sake of accuracy in special 
cases, is double the original length, but which is self-checking. Sup¬ 
pose that instead of applying a single numerical key to the base of the 
triangle, a double-length key is applied to the legs, as shown in 
Figure 4. Here the key is TRIANGLES, extended to double length 
by simple repetition, as follows: 

1—2-3-4—5-6-7-8—9-10-11-12-13-14-15-16-17-18 
Keyword: TRIANGLE S TRIANGLES 

Numerical key: 17-13-7-1-11-5-9-3-15-18-14—8—2-12—6-10—4-16 

This key is applied to the legs of the triangle beginning at the lower 
left-hand corner. The transcription then follows key-number order, 
which results in doubling the length of the message but the repeated 
letters are scattered throughout the whole message. In decrypto¬ 
graphing such a message the clerk merely omits the second occurrence 
of a letter if it agrees (in identity) with its first appearance in the text. 

c. Many variations in inscription and transcription can be em¬ 
ployed in the case of triangles as well as trapezoids. Some of the 
variations in the case of triangles are shown in Figure 5. 
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6. Diagonal methods.— a. A method involving diagonal trans¬ 
position which is reported to have been employed hy the French 



CTRNI GENNE ATCSR OSIIR 
SIOET RTUAI POECO TNESS 
DPRCD AURSD 

0 

Fiourk 4. 

Army in the World War is now to be described. A numerical key is 
erived from a fairly long word or plirase, and a rectangle is con¬ 
structed, as in Figure 6. The text is inscribed in this rectangle in 



(b) In diagonals from right leg, in key-number order: 


RIEDR OUAYN eto. 

(c) In rows from left leg, in key-number order: 

CTGEO YTCEU eto. 

(d) From columns in key-number order: 

CNROI TUGRU eto. 

Figure 5. 

normal fashion, nulls being employed, if necessary, to complete the 
last line of the rectangle. 

6. The correspondents agree beforehand upon several diagonals 
which run from left to right, and from right to left and which inter- 
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sect, thus cutting up the design quite thoroughly. In Figure 6 let 
these selected diagonals be those indicated by the numbers from 1 to 
6, inclusive, the odd ones indicating diagonals running from left to 
right. In the transcription, the letters along the indicated diagonals 
are first set down in groups of five, proceeding in key-number order. 
Correspondents must also agree beforehand as to whether a letter 
which lies at the intersection of two diagonals will be taken both times 
it is encountered or taken only once and, if so, whether on its first or 
second appearance. After all these letters have been written down, 
one then proceeds with the remaining letters in the usual columnar 
manner, omitting the letters which have already been taken, or, 
again, if specially agreed upon, repeating them every time they are 
encountered. If the latter is done, the inclusion of such letters not 
only serves as a check upon accuracy but also maberially increases the 
difficulties of solution, since in tliis case these letters act like nulls. 
The ciyptographing jDrocess wiU become clear upon the study of the 
example in Figure 6. 

Message: ENEMY BATTERY LOCATED AT WOODS 1,000 YARDS 
SOUTHEAST OF MUMMASBURG HEAVY ARTILLERY 
STOP THEY ARE FIRING AT RATE OF THREE ROUNDS 
PER MINUTE FOR THE BATTERY X WILLS, MAJ. 

Keyphrase: MIDNIGHT RIDE OF PAUL REVERE. 

Enciphering diagram: 


M 

15- 

I D 
-11-2- 

N 

16- 

I G 
-12-9- 

H 

-10- 

T 

-22- 

1 

I 

-13- 

D E 0 F 
.3-4-17-8- 

P A 
18-1- 

u 

23- 

L R E 
14-20-5- 

V E 
24-6- 

R E 
21-7 

E 

N|E| 

M 

Y B 

A 

T 

T 

E 

R 

Y L 0 

C|A| 

T 

E 

d|a| tIwI 

0 0 

D 

l§|o 

N 

E T 

H 

0 

U 

S 

A 

N D Y 

A R 

I5l 

S 

S 0 

|y|T 

H E 

|A| 

S T 

0 

F M 

U 

M 

M 

|A|s : 

B IuIr 

G H 

E 

|A| 

v|Xl 

A|R| 

T I 

L 

L E 

R 

Y S 

T 

0 

Ifl 

THE Y |A| 

R E 

F 

I 

111,1, 

N G 

|A|T 

R 

A T 

E 

0 F 

T 

|H| 

R 

E E R 0 U 

INID 

S 

|P| 

E|Rl 

M I 

N|y| 

T 

E F 

0 

R T 

|h| 

E 

B 

ATT E R 

Y|X| |Wl 

I 

L L 

|s|m 

A J 


Cryptogram: 

ADARR SESAR NUANX YAAPH HAURA UWYPW 
RHEDO TETFS HETBE RTOIL TGIMO EITJO 
YRURB TMSFT AHUTT NSLAE YEFYO RESTE 
AESII EDLRT MNORE OLDYO ECAGR YTUMR 
BDSVE LOHTN ATOMO ETEFS TANM 


Figure 6. 


7. Interrupted keyword transposition.— a. This method of 
transposition is a development of a more simple method wherein the 
transposition follows a numerical key. The latter must first be 
described. A keyword or keyphrase of fair length is selected and a 
numerical key derived from it. Let this key be the phrase UNI¬ 
FORMITY OF METHOD. 

Keyphrase: U NIFO RMIT Y OFMETHOD 

Numerical key: 17-10-6-3-11-14-8-7-15-18-12-4-9-2-16-5-13-1 
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The plain text is then written out in horizontal lines corresponding 
to the length of the key; then transposition is effected within each 
according to the sequence of numbers applicable, as shown in Figure 7> 

Message: ADMINISTRATIVE ORDERS MUST BE COMPLETED ANp 
READY TO ACCOMPANY FIELD ORDERS NOT LATEg 
THAN 5:00 P.M. THIS DATE. 

Enciphering diagram: 

17-10-6-5-ll-14--8~7-15-18-12-4-9-2-16~5~13-l 
A DMIN ISTR A TIVEORDE 

R SMUS TBEC 0 MPLETEDA 

N DREA DYTO A CCOMPANY 

F lELD ORDE R SNOTLATE 

R THAN FIVE P MTHISDAT 

E 

Cryptogram: 

EEIIR MTSVD NTDIR OAAAE UPEME BLSSM 
DTCTR OYMEC ARTYO DACND OPNAE TLNAE 
DROID STOEL FRTIA TDHVI HTNMA FESRP 
E 

Fioube 7. 


h. In the foregoing case the encipherment takes j^lace only by 
transposition witliin rows, but it is possible to complicate the method 
by transposing, in addition, the rows as a whole, employing the saine 
key or only a portion of it, as much as is required. Thus, if the iiios- 
sago contained 18 rows of 18 letters each, then the transposition of 
rows could bo effected according to key-number order, the last row 
being taken first (since the number 1 of the numerical key happens 
in this case to be at the end of the numerical key), the 14th row being 
taken second (since the number 2 of the numerical key is the l4th' 
number), and so on. Where tho message does not contain as many 
complete rows as there are numbers in tho key, tho transposition 
takes place in key-number order nevertheless, tho rows being taken 
in tho numerical order of the numbers present. Using tho samo key 
and message as in the foregoing case, the encipherment would be as 
shown in Figure 8. 

Enciphering diagram: 


17--10~6-3-11~14~8--7 -15-18~12~4-9-2-16~5-1.3-.1 
17: A DMIN ISTR A TIVEORDE 

10: R SMUS TBEC 0 MPLETEDA 

6:N DREA DYTO A CCOMPANY 

3:F lELD ORDE R SNOTLATE 

11: R THAN FIVE P MTHISDAT 

14: E 


Cryptogram: 

ETLNA EDROI DSTOE LFRYM ECART YODAC 
NDOPN AAEUP EMEBL SSMDT CTROT lATDH 
VIHTN MAFES RPEEE IIRMT SVDNT DIROA 
A 


Figure 8. 
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c. From the preceding method it is but a step to the method of 
interrupted key transposition now to be described. Instead of writing 
the text in regular-length groups corresponding to the length of the 
key, it is written out in irregular groups the lengths of which vary 
according to some prearranged plan. For example, note the basis of 
the variable grouping in the following diagram, which uses the same 
message and key as under a above: 

Eiiciphering diagram: 


17 10 6-3-11-14—8—7 15 18 12 4—9 2 16 5 13 1 

A 

D 

M 

1 N 

I 

S 

T R 

A 

T 

I 

V 

E 

0 

R 

D 

E 

R 

S 

M 

U S 

T 

B 

E C 

0 

M 

P 

L 

E 

T 

E 

D 

A 

N 

D 

R 

E A 

D 

Y 

T 0 

A 

C 

C 

0 

M 

P 

A 

N 

Y 

F 

I 

E 

L D 

0 

R 

D E 

R 

S 

N 

0 

T 

L 

A 

T 

E 

R 

T 

H 

A N 

F 

I 

V E 

P 

M 

T 

H 

I 

S 

D 

A 

T 

E 
















17- 

-10- 

-6- 

i 

rH 
r—1 

1 

to 

! 


-7-15- 

1 

CO 

1 

-1 ? 

4 

Q- 

“-2- 

■16- 

5 

-13- 

_1 












A 

D 

M 

I N 

I 

S 

T R 

A 

T 

I 

V 

E 

0 

R 

D 

E 

R 

S 

M 

U S 

T 

B 

E C 

0 

M 

P 

L 

E 

, 

, 



T 

E 

D 

A . 













N 

D 

R 

E A 

D 

Y 

T 0 

A 

C 

C 







0 

M 

P 

A N 

Y 

F 

I E 

L 

D 

0 

R 

D 

E 

R 



S 

N 

0 














T 

L 

A 

T E 

R 

T 

H . 










A 

N 

F 

I V 

E 

P 








, 



M 

T 

H 

I S 

D 

A 

T E 

(L 

C 

E 

p) 

* 


. 




Cryptogram (columnar transposition in key-number sequence): 

EEEDI UAEAT HIPC OERRM MDRPO AFHTE 
TIHTS BYFTP AVLRP DSEDM NLNTN SANEV 
STMCD CDITD YREDR COEEO EARTN OSTAM 
AOALL 

Figure 9. 

d. This method may be combined with that shown under h above, 
thus further complicating the system. In decryptograpliing such a 
message it is best to use cross-section paper, block out the cells to be 
occupied by letters in the deciphering diagram, and indicate the key 
numbers applicable to each line. Tliis will facilitate the process mate¬ 
rially and help eliminate errors. 

e. Another method of interrupted transposition is that wliich 
employs a rather long sequence of digits to control the interruption. 
In order to avoid the necessity of carrying around such a written 
sequence, it is possible to agree upon a number whose reciprocal when 
converted by actual division into its equivalent decimal number will 
give a long series of digits. For example, the reciprocal of 7, or 1/7, 
yields a repeating sequence of six digits: 142857142857 , . the 
reciprocal of 49, 1/49, yields a repeating sequence of 42 digits, etc. 


(♦The four final letters LOEP are nulls, to complete the row.) 
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Zeros, wlien they appear, are omitted from the sequence. Suppose the 
number 19 is agreed upon, the reciprocal of which yields the sequence 
(0)52631578947368421. On cross-section paper mark off sets of ceffs 
corresponding in number to the successive digits. Thus: 

.■5 2 0 3 1 5 

I I I I I Ixi I ixi I I m~lx| I I ixi IXI I I I M etc. 

Let the message be ATTACK HAS BEEN POSTPONED. 
Encipherment: 

5 2 6 3 1 6 

|a|h|e|s|o|x|t|a|X|t|s|n|t|n|d|X|a|b|p|x|c|X|k|e|o|pTe | 

Cryptogram: 

AHESO TATSN TNDAB PCKEO PE 

/. To decryptograph such a message, the cryptogram is written 
down in a scries of cross-section cells, which are then blocked off' in 
sets according to the numerical key: 

5 2 6 3 1 5 

| a|h|e|s|o|xIt|a|X|t|s|n|t|n|d|X|a|b|p|x|c|X|k|e|o|pTe I 

Taking the letters in consecutive order out of the successive sots, and 
crossing them off the series at the same time as they are being written 
down to construct the plain text, the message is found to begin with 
the following two words: 

5 2 6 3 1 S 

lAIUllElSlOlXltlAIXllfljplNlTlNlDlXl^lBlPlXl^lXl^lElOlPlE l 

ATTACK HAS . . . 

</. Preparatory to cryptographing, it is necessary to find the length 
of the message to bo enciphered and then to mark off as many colls as 
will bo required for encipherment. Nulls are used to fill in cells that 
are not occupied after enciphering the whole message. The secrecy of 
the method depends, of course, upon the reciprocal selected, but there 
is no reason why any fraction that will yield a long series of digits 
cannot bo employed. If the selection of key numbers wore restricted 
to reciprocals, the secrecy would be more limited in scope than is 
actually necessitated by the method itself. 

8. Permutation method.—a. An old method, luiown in litera¬ 
ture as the aerial telegraphy methodj^ forms the basis of this system. 

1 So named because it was first devised and employed in messages transmitted 
by a system of semaphore signaling in practical usage in Europe before the 
electrical telegraph was invented. 
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A set of permutations of 3 4, ... 9 digits is agreed upon and 
these permutations are listed in a definite series. As an example, let 
these permutations be made of the digits 1 to 5, selecting only four 
of the possible 120. Suppose those selected are the following, set 
down in successive lines of the diagram in Figure 10a: 



Figure 10a. 


The letters of the plain text, taken in sets of fives, are distributed 
within the sections of the diagram in accordance with the permuta¬ 
tions indicated above the sections and also at the left. Thus, the 
first five letters of the text, supposing them to be the initial letters of 
the word RECOMMENDATIONS, are inserted in the following 
positions: 

Permutation 


2 

3 

1 

5 

4 

E 

C 

R 

M 

0 


The next five letters are inscribed in the second line of the diagram 
in the sections indicated by the permutation above and at the left of 
the line. Thus: 


Permutation 


2 3 15 4 

2 

3 

1 

5 

4 

E 

C 

R 

M 

0 

3 2 5 1 4 

3 

2 

5 

1 

4 

N 

E 

A 

M 

D 


Tliis process is continued for each line and for as many lines as there 
are permutations indicated at the left. In the foregoing case, after 
twenty letters have been inserted, one inserts a second set of five 
letters again on the first line, placing the letters of this second set 
immediately to the right of those of the first set, respectively in key- 
number order. The succeeding lines are treated in similar fashion 

r.SO'lOS'’—44-2 
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until the whole message has been enciphered. The following example 
will illustrate the process: 

Message: KECOMMENDATIONS FOR LOCATIONS OF NEI^ 
BALLOON POSITIONS MUST BE SUBMITTER 
BEFORE 12TH AIRDROME COMPANY CHANGES 
COMMAND POST TOMORROW. 

Enciphering diagram: 


Permutation 


9 ^ ^ A 

1 ^ 

3 

1 

5 

— 

\J 1. \J *-k 

EASEOM 

CTIDMA 

RCOTRM 

MOIECD 

OITB^ 

3 2 5 1 4 

3 

2 

5 

1 

4 

NOSRPS 

ESNOMO 

ANUTNT 

MNOFOP 

DFME^ 

1 5 3 2 4 

1 

5 

3 

2 

4 ^ 

TESWYO 

SLSTNR 

OBBLHO 

IWTECM 

NAEFAR 

4 3 15 2 

4 

3 

1 

5 

2 

LNIRCB* 

ROMISC* 

FLUHGO 

OPTDOD* 

00BAEW_ 


• The letters B, C, and D are nulls, to complete the figure. 


Fiourk 10b. 

The letters of the cipher text are taken from the diagram according 
to any prearranged route, the most simple being to transcribe the 
lines of letters in groups of fives, thus: 

EASED MCTID MARCO TRMMO lECDO ITBEN 
NOSRP SESNO MOANU TNTMN OFOPD FMEAT 
TESWY OSLST NROBB LHOIW TECMN AEFAR 
LNIRC BROME SCFLU HGOOP TDODO OBAEW 

b. The foregoing method when employed in its most simple form 
does not yield cryptograms of oven a moderate degree of security; 
but if the method of inscription and transcription is varied and mado 
more complex, the degree of security may bo increased cpiite notice* 
ably. It is possible to use longer permutations, based on sots of 0, 
7, 8, or 9 digits, but in every case the successive permutations must 
be prearranged as regards botli their exact composition and their 
order or arrangement in the diagram. 

9. Transposition method using special figures.— a. The 
method now to bo described is useful only in speeial cases where the 
correspondence is restricted to brief communications between a very 
limited number of persons. It is necessary to agree in advance on 
certain particulars, as will be seen. Let the message to bo encii)hered 
be the following: 

FOUR TRANSPORTS WILL BE COMPLETED BY END 
OF APRIL AND SIX MORE BY END OF JULY. 
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Note the following figures and enciphennent: 




F- 




V 

-u 


-A S- 


-T D- 


-E Y- 


B 


Cryptogi’am; 


-0 T- 


-W L- 


-B 0- 


R 

T> 


-Y N- 


I 

P 

-0 A—I-L- 

I 

Y 


E 

A 


P 

1 


-N S- 


-J 1- 


U 


ORPSL OFUTA SOTWL BCMRN RIEPE BDPAI 
LTDYN OARLN SXEEF IDMRE FYOEY NOJLB 
DU 

Figure 11. 


b. It will be noted that it is essential to agree in advance not only 
upon the nature of the figure but also upon the number of figui’es per 
line. 

c. The next series is a modification of the preceding. The same 
message will be employed, with a double-cross figure, five figures per 
line. 


O’ t; 


F- 

N- 


-R S- 


A H 
A N 


M- 


-T I- 


s> 


] 

I 


f 


f £ 



R E 


XI N E 


L B 


-R L. 
-T P. 


-E L- 


M 0 
P J 




D 0 - 


- B O' 





S JJ 


Y 











-U 

-L 


.-C B- 


] 

S ! 

? 




■ 

f 1 

i 


D 0 


• B R- 
. D I- 


R P 


Cryptogram: 

OUPOL BETDO FRSRL ELENF NTITP CEDIA 
ARWSM OYBRP ANREF JLDOB OUMSD YLXIN 
EY 


Figure 12. 
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d. Still another series may be formed, as follows: 


p 

s 

I 

, I 

T V 

. 1 

S 1 

I 

D 

B ■ 

0 r "■ 





A 

. .. TT Iff 

0 w 

T 

T R 

0 

TS 



E ^ 

_E P 

P 

!1 

! a 

» c 

1 I 

) i 

1 

I 

. 0 

c 

1 



M 

A D 

g 

P 



X 

N B 

E 

J 



I 

D E 

H Y 




1 

5 1 

] 

[i 




Cryptogram: 

FSLLN NOIPP LEEID AUWOM BYTRO RRSRO 
EBEPF TTCDA LOOMA DRFXN NEJID EBYUS 
YL 

Figure 13. 

e. A figure of different form than the preceding forms the basis of 
the next type. 


OOEDRTOYRWPNNLE 



fpbeurcbtsueaildslt 


FNROPSBJIXEL 



OAODADEFRIIULMNI 

Cryptogram: 

OOEDR TOYRW PNNLE FPBEU RCBTS 
MEAIL DSLTF NROPS BJIXE LOAOD 
ADEFR lYULM NY 

Figure 14. 

/. From the foregoing examples, it is obvious that many other 
figures may be used for effective transpositions of this land, such as 
stars of varying numbers of points, polygons of various symmetrical 
shapes, etc. It is merely necessary to agree upon the figures, the 
number of figures per line, the starting points of the inscription and 
transcription processes. 

g. The method lends itself readily to combination with simple 
monoalphabetic substitution, yielding ciyptograms of a rather liigh 
degree of security. 
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Section III 

POLYPHASE TEANSPOSITION SYSTEMS 

Paragraph 


Polyphase transposition methods in general..-.. 10 

True and false polyphase transpositions---- 11 

True double transposition_____ 12 


10. Polyphase transposition methods in general.— a. In 
paragraph 32 of Special Text No. 165, brief mention was made of 
transposition systems in which two or more processes of rearrange¬ 
ment are involved. It was stated that only a very limited number 
of such transposition methods are practicable for miUtary use, but 
that the degree of security afforded by them is considerably greater 
than that afforded by certain much more comphcated substitution 
methods. The methods referred to are those which involve two or 
more successive transpositions, and merely for purposes of brevity 
in reference they will here be called polyphase transposition methods 
to distinguish them from the single monophase methods thus far 
described. 

h. It is obvious that a polyphase transposition method may involve 
2, 3, . . . successive transpositions of the letters of the plain 
text. To describe these methods in general terms, one may indicate 
that the letters resulting from a first transposition, designated as the 
T-l transposition, form the basis of a second, or T-2 transposition. 
If the process is continued, there may be T-3, T-4 . . . trans¬ 
positions, and each may involve the use of a geometric figure or 
design. Por convenience, the design involved in accomplishing the 
T-l transposition may be designated as the D-1 design; that involved 
in accomplishing the T-2 transposition as the D-2 design, etc. 
However, it may as well be stated at this point, that so far as military 
cryptography is concerned, methods wliich involve more than D-2 
and T-2 elements are entirely impractical and often those wliich 
involve no more than D-2 and T-2 elements ai’e also impracticable 
for such use. 

11. True and false polyphase transpositions.— a. It is pos¬ 
sible to perform two or more transpositions ■with the letters of a text 
and yet the final cryptogram vdll be no more difficult to solve than if 
only a single transposition had been effected. The equivalent of this in 
the case of substitution ciphers is to encipher a monoalphabetic ciypto- 
gram by means of a second single alphabet; the final result is still a 
monoalphabetic substitution cipher. Likewise, if a message has been 
enciphered by a simple form of route transposition and a second and 
similar or approximately similar form of simple route transposition 
is again applied to the text of the first transposition, the final text is 
still that of a monophase transposition cipher. Again, two transpo¬ 
sitions may be accomplished without reaUy affecting a most thorough 
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scrambling of the letters composing the original text. Examples 
will serve to clarify the difference between false and true polyphase 
transposition. 

b. Note the following simple columnar transposition cipher pre¬ 
pared according to the method described in paragraph 26 of Special 
Text No. 165: 

Message: DELIVER ALL AMMUNITION TO 4Tn DIVISION 
DUMP 


Keyword: SCIIEDULE=S_C_H^E^D^U^L^E 
Enciphering rectangle: 


7 1 5 3 2 8 6 4 


D 

E 

L 

I 

V 

E 

R 

A 

L 

L 

A 

M 

M 

U 

N 

I 

T 

I 

0 

N 

T 

0 

F 

0 

U 

R 

T 

H 

D 

I 

V 

I 

S 

I 

0 

N 

D 

U 

M 

P 


Cryptogram (T-1): 

ELIRI VMTDD IMNHN AIOIP LAOTO RNFVM 
DLTUS EUOIU 

Figure 16 . 

In producing the foregoing cryptogram only the columns were 
transposed. Suppose that by prearrangement, using the keyword 
BREAK (derived numerical key=2-5-3-1-4), the horizontal lines 
of the foregoing enciphering rectangle were also to bo transposed, 
lor example, let the horizontal lines of the rectangle D-1 be trans¬ 
posed immediately before taking the letters out of the columns of the 
design (in key-number order) to form the cipher text. Thus: 


D 

L 

T 

E 

L 

I 

L 

A 

0 

I 

M 

N 

V 

M 

T 

E 

U 

0 

R 

N 

F 

A 

I 

0 

U 

R 

T 

H 

D 

I 

V 

I 

S 

I 

0 

N 

D 

U 

M 

P 


D-l 


7 

1 

5 

3 

2 

8 

() 

4 

U 

R 

T 

H 

D 

I 

V 

I 

D 

E 

L 

I 

V 

E 

R 

A 

T 

I 

0 

N 

T 

0 

F 

0 

S 

I 

0 

N 

D 

U 

M 

P 

L 

L 

A 

M 

M 

U 

N 

I 


D-2 


Cryptogram (T-2): 

^AOPI TLOOA VRFMN 

UDTSL lEOUU 


Figure 16 . 
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c. The foregoing, however, is not a case of true polyphase or so- 
called double transposition. The same final result may be accom¬ 
plished in a way which will at first glance appear quite different but is 
in reality one that accomplishes the same two operations by combin¬ 
ing them in one operation. Let the message be inscribed as before, 
but this time with both numerical keys applied to the top and side 
of the rectangle. Then let another rectangle of the same dimensions, 
but with numbers in straight sequence instead of key-number sequence, 
be set alongside it. Thus: 


71532864 12345678 



Figure 17. 


Each letter in D-1 is now transferred to tliat cell in D-2 wliich is 
indicated by the row and column indicators of the letter in D-1. 
For example, the first letter, D, of D-1, has the indicatoi’s 2-7 and 
it is placed in the 2-7 cell in D-2; the second letter of D-1, which is 
E, is placed in the 2-1 cell of D-2, and so on. The final result is as 
follows: 



7 

1 

5 

3 

2 

8 

6 

4 


1 

2 

3 

4 

5 

6 

7 

8 

2 

D 

E 

L 

I 

V 

E 

R 

A 

1 

R 

D 

H 

I 

T 

V 

U 

I 

5 

L 

L 

A 

M 

M 

U 

N 

I 

2 

E 

V 

I 

A 

L 

R 

D 

E 

3 

T 

I 

0 

N 

T 

0 

F 

0 

3 

I 

T 

N 

0 

0 

F 

T 

0 

1 

U 

R 

T 

H 

D 

I 

V 

I 

4 

I 

D 

N 

P 

0 

M 

S 

U 

4 

S 

I 

0 

N 

D 

U 

M 

P 

5 

L 

M 

M 

I 

A 

N 

L 

U 


D-1 d-2 


Figure 18. 

It will be seen that if the columns of D-2 are now read downwards 
in straight order from left to right the final cryptogram is identical 
with that obtained under h above: liEllL DVTDM, etc. 

cZ. The foregoing cipher, often called the Nihilist Cipher, is referred 
to in some of the older literature as a double transposition cipher 
because it involves a transposition of both columns and rows; and 
indeed as described under b above it seems to involve a double process. 
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It is, however, not an example of true double transposition. When 
the mechanism of tliis cipher is compared with that now to be 
described, the great difference in the cryptographic security of the two 
methods will become apparent. 

12. True double transposition.—In the form of the false double 
transposition described above, it is only entire columns and entire 
rows that are transposed. The disarrangement of the letters is after 
all not very thorough. In true double transposition this is no longer 
the case, for here the letters of columns and rows become so thor¬ 
oughly rearranged that the final text presents a complete scrambling 
almost as though the letters of the message had been tossed into a hat 
and then drawn out at random. 

Section IV 

TRUE DOUBLE TRANSPOSITION 

Paragraph 


True double transposition of the columnar type_ 13 

General remarks on true polyphase transposition_ 14 


13. True double transposition of the columnar type.— a. It is 
by what is apparently a simple modification of certain of the co¬ 
lumnar methods already described that an exceedingly good true 
double transposition can be effected. Let a numerical key bo derived 
from a keyword in the usual manner and lot the message be written 
out under this key to form a rectangle in the usual maimer for colum¬ 
nar transposition. The length of the message itself determines the 
exact dimensions of the rectangle thus formed, and whether or not it 
IS completely or incompletely filled. 

6. In its most elective form the double transposition is based upon 
an incompletely filled rectangle; that is, one in which one or more cells 
in the last line remain unfilled. An example of the method now follows. 
Let the keyword be INTERNATIONAL; the message to be enciph¬ 
ered, as follows: 

OUR ATTACK SLOWING UP IN FRONT OF HILL 1000 
YARDS SOUTHEAST OF GOLDENVILLE STOP RE¬ 
QUEST PROMPT REENFORCEMENT. 

Keyword: INTERNATIONAL 

Denved numerical key: 4-7-12-3-11-8-1-13-5-10-9-2-6 

The first, or D-1, rectangle is inscribed in the usual manner of simple 
numerical key columnar transposition. It is shown as D~1 in the 
accompanying figure. The letters of the T-1 transposition are then 
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4-7—12-3—11-8—1—13-5- 10-9—2—6 


0 

U 

R 

A 

T 

T 

A 

C 

K 

S 

L 

0 

W 

I 

N 

G 

U 

P 

I 

N 

F 

R 

0 

N 

T 

0 

F 

H 

I 

L 

L 

0 

N 

E 

T 

H 

0 

U 

s 

A 

N 

D 

Y 

A 

R 

D 

S 

S 

0 

U 

T 

H 

E 

A 

S 

T 

0 

F 

G 

0 

L 

D 

E 

N 

V 

I 

L 

L 

E 

S 

T 

0 

P 

R 

E 

Q 

U 

E 

S 

T 

P 

R 

0 

M 

P 

T 

R 

E 

E 

N 

F 

0 

R 

C 

E 

M 

E 

N 

T 







D-1 


4-7—12-3—11 -8—1—13-5- 10 -9—2— 6 



Figure 19a. 


inscribed in the second, or D-2, rectangle in the normal manner oj 
writingj that is, from left to right and from the top dowmwards. This 
is shown in D-2 of Figure 19a for the first two columns of D—1 (in 
numerical key order) after transfer of their letters into D-2. The 
letters of the remaining columns of D-1 are transferred in the same 
manner into D-2, yielding the following rectangle: 
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4—7—12 - 3—11 - 8—1—13 - 5 -10 - 9—2— 6 


A 

N 

N 

D 

G 

0 

P 

N 

0 

T 

U 

T 

N 

U 

N 

A 

U 

L 

Y 

T 

E 

R 

E 

0 

I 

F 

A 

E 

I 

S 

0 

K 

R 

T 

S 

L 

R 

R 

W 

0 

S 

H 

V 

E 

F 

U 

N 

H 

N 

A 

L 

T 

R 

T 

I 

0 

R 

F 

T 

M 

E 

L 

N 

0 

U 

E 

Q 

E 

S 

0 

H 

0 

D 

E 

E 

T 

P 

L 

A 

0 

S 

0 

M 

R 

G 

I 

D 

S 

L 

P 

C 

C 

F 

E 

S 

0 

P 

T 

T 







Figure 19b. 


For tlio T-2 text the letters are transcribed from the D-2 rectangle, 
readmg down the columns in key-number order, and grouping the 
letters in fives. The cryptogram is as follows: 

PTRUT OGTTI RLOPP DUSVO SOSAU AOREA 
CORSH EEDNF WTULC NNEST QOFOY KFFHR 
PUORA NTLTE LNLES GLOER OMONA IHIES 
ENETN MDIT 

c. In paragraph 28 of Special Text No. 165 a variation of the simple 
columnar key method of transposition was descril)ed. If the process 
therein indicated is repeated, double transposition is effected. The 
following example will serve to illustrate the method, using the same 
message and key as were used in the paragraj)!! to which reference 
was made: 

Message: REQUEST IMMEDIATE REENFORCEMENTS 

Keyword: PRODUCT 

Derived numerical key: 4-5-3-2-7-1-6 

Encipherment: 


4-5-3-2-7-1-6 
Text: REQUEST 
T-1: S I N E U E E 
T-2: E R E E E R E 


4-5-3-2-7-1-6 
I M M E D I A 
E Q M R C R I 
F N M T A S E 


4-5-3-2-7-1-6 
T E R E E N F 
T 0 T E M E R 
T S E I Q 0 T 


4-5-3-2-7-1-6 4-5 
ORCEMEN TS 
STAFNED EM 
MEIRDUC MN 


Cryptogram: 

EREEE REFNM TASET SEIQO TMEIR 
DUCMN 
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d. In some respects this modified method is simpler for the novice to 
perform correctly than is that employing rectangles. Experience has 
shown that many inexpert cryptographic clerks fail to perforin the two 
transpositions correctly when D-1 and D-2 rectangles are employed 
in the work. 

14. General remarks on true polyphase transposition.— a. 
The ciyptogra])hic security of the true double transposition method 
deserves discussion. Careful study of a cryptogram enciphered by the 
double transposition method set forth in paragraph 136 and c vdll 
convince the student that an extremely thorough scrambling of the 
letters is indeed brought about by the method. Basically, its principle 
is the splittmg up of the adjacent or successive letters constitutmg 
the plain text by two sets of ^^cuts'^ the second of wliich is in a direc¬ 
tion that is perpendicular to the fii*st, with the individual ^^cuts^' of 
both sets arranged in a variable and irregular order. It is well adapted 
for a regular and voluminous exchange of cryptograms between corre¬ 
spondents, because even if many messages in the same key are inter¬ 
cepted, so long as no two messages are identical in lengthy they can only 
be cryptoanalyzed after considerable efl’ort. 

6. Tri])le and quadruple transpositions of the same nature are 
possible but not practical for serious usage. Theoretically, a continu¬ 
ation or repetition of the transposition process will ultimately brmg 
about a condition wherein the D-n rectangle is identical with the 
D-1 rectangle; in other words, after a certain number of trans¬ 
positions the rectangle produced by a repetition of the crypto- 
graphing process results finally in decryptographing the message. 
Exactly how many repetitive transpositions intervene in such cases is 
extremely variable and depends upon factors lying outside the scope 
of this text. 

c. In the example of ciyptographing given in paragraph 136, the 
D-1 and D-2 rectangles are identical in dimensions, and identical 
numerical keys are applied to effect the T-1 and T-2 transpositions. 
It is obvious, however, that is it not necessary to maintain these 
identities; D-1 and D-2 rectangles of different dunensions may 
readily be em])loyed, and even if it is agreed to have the dimensions 
identical, the numerical keys for the two transpositions may be differ¬ 
ent. Furthermore, it is possible to add other variable elements. (1) 
The direction or manner of inscribing the letters in the D-1 rectangle 
may be varied; (2) the direction of reading off or taking the letters out 
of the D-1 rectangle in effecting the T-1 transposition, that is, in 
transferring them into the D-2 rectangle, may be varied; (3) the 
direction of inscribing these letters in the D-2 rectangle may be 
varied; (4) the direction of reading off or taking the letters out of the 
D-2 rectangle in effecting the T-2 transposition may be varied. 
Finally, one or more nulls may be inscribed at the end of either the 
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D-1 or the D-2 rectangle (but not both) in order tliat the totj^ 
number of letters involved in the two transpositions be different, 
factor which still further increases the degree of cryptographic 
security. 

d. The solution of cryptograms enciphered upon the double trans, 
position principle is often made possible by the presence of certaui 
plain-text combinations, such ns QU and Cfl (in German). For this 
reason, careful cryptographers substitute a single letter for sucH 
combinations, as decided upon by preagreement. For example, in 
one case the letter Q was invariably used as a substitute for the i 
compound CH, with good effect. 

Section V 

GRILLES AND OTHER TYPES OF MATRICES 

Paragrapi) 

lypes of cryptographic grilles___—.. 15 

Simple grilles...-.. 16 

devolving grilles...-. 17 

Grilles of other geometric forms_ 18 

Polyphase transposition by grilles_ 19 

Increasing the security of revolving grilles_20 

Construction of revolving grilles_ 21 

Nonperforated grilles_ 22 

Rectangular or “post card” grilles_ 23 

Indefinite or continuous grilles_ 24 

Types of cryptographic grilles.—Broadly speaking, crypto¬ 
graphic grilles ‘ are sheets of paper, cardboard, or thin metal in which 
perforations have been made for the uncovering of spaces in which 
letters (or groups of letters, syllables, entire words) may be tvritten 
on another sheet of paper upon which the grille is superimposed. 
This latter sheet, usually made also of cross-section paper, AviU here- 
after be designated for purposes of brevity in reference as the griUe 
0^, or grid. Its external dimensions are the same as those of the 
grille. Grilles are of several types depending upon their construc¬ 
tion and manner of employment. They will be treated here under 
he titles of (1) simple grilles, (2) revolving grilles, (3) nonperforated 
grilles, and (4) “post card” grilles. 

16. Simple grilles.— a. These consist usually of a square in which 
loles or apertures have been cut in prearranged positions. When 
16 grille is superimposed upon the grid, these apertures disclose cells 
on the grid, in which cells letters, groups of letters, syllables, or entire 
'Voids may be inscribed. An example is shown in Figure 20. The 
our sides of the obverse surface of the grille are designated by the 
gures 2 , 3, 4; the four sides of the reverse surface, by the figures 

called “stencils.” The general term matrix (plural, matrices) is 
PurposPH /‘i^ovring to a geometric figure or diagram used for transposition 
• Other terms in common use are cage^ frame, box, etc. 


1 


J 
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5, 6, 7, 8. These figures are employed to indicate the position of the 
grille upon the grid in encipherment. 

b. (1) In cryptographing a message the grille is placed upon the 
grid, in one of the eight possible positions: Obverse surface up, mth 



Figure 20. 


figure 1, 2, 3, or 4 at the top left; or reverse surface up, with figure 5, 
6, 7, or 8 at the top left. The letters of the plain text are then 
inscribed in the cells disclosed by the apertures, following any pre¬ 
arranged route. In Figure 21, the normal manner of Avriting, from 
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left to right, and from tho top downwards, has been followed i/^ ^he 
inscription, the message being ALL DESTROYERS OUTSIDEl, 



(2) Tho transcription process now follows. Tho cipher text is 
written down, tho letters being taken by following any prearraDged 
route, which must bo perpendicular to tho route of inscrij)tion, other¬ 
wise the letters will follow in plain-text order. In tho following, the 
route is by columns from left to right. 

Cryptogram: 

LRTAD TSSER VOIDS ELOEU 

(3) If the number of letters of tho j)lain-text message exceeds the 
number of cells disclosed by one jjlacement of tho grille, the letters 
given by this placement are written down (in cryptographic order), 
and then the grille is placed in tho next position on a fresh grid; the 
process is continued in this manner until the entire me.ssage has been 
cryptographed. Tho several sections of the cipher letters resulting 
from the placements of the grille on successive grids merely follow 
each other in the final cryptogram. In this manner of employment 
it IS only necessary for tho correspondents to agree upon the initial 
position of the grille and its successive positions or placements. 

c. It is obvious that by the use of a simple grille tho letters of a 
message to be cryptographed may be distributed within an enveloping 
message consisting mostly of “dummy" text, inserted for purposes of 
enabling the message to escape suppression in censorship. For 

rnn"!! fi!’ the grille shown in Figure 20 is employed in position 

ana the message to be conveyed is ALL DESTROYERS OUTSIDE. 
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The letters of tliis message are inscribed in their proper places on the 
grid, exactly as shown in Figure 21. An ^^open^^ or disguising text 
is now to be composed; the latter serving as an envelope or cover” 
for the letters of the secret text, wliich remain in the positions in 
which they fall on the grid. The open or disguising text, in other 
words, is built around or superimposed on the secret text. Note how 
this is done in Figure 22, with an apparently innocent message 
reading: 

I HAVE WORICED VERY WELL ALL DAY, TRYING TO 
GET EVERYTHING STRAIGHTENED UP BEFORE GOING 
ON MY NEXT TRIP SOUTH, BUT INSIDE TEN DAYS . . . 
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d. The foregoing method naturally requires the transmission of 
considerably more text than is actually necessary for conveying the 
message intended. Where questions of censorsliip are not involved, 
the method is therefore impractical. A modification of the method 
suggests itself in the use of a transparent sheet of paper superimposed 
upon a square or other figure in wliich the individual cells are irregu¬ 
larly numbered and the inscription process follows the sequence of 
numbers. An example is shown in Figure 23, using the message 
ROCK CREEK BRIDGE WILL BE DESTROYED WHEN 
TAIL HAS CROSSED. 
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Tho transcription may now follow any prearrangod route. The 
normal method of reading would produce the cryptogram beginning 
WCTEH OEERI, etc. It is obvdous that the correspondents must 
possess designs with identically numbered cells.^ 

17. Revolving grilles.— a. In this type of giille (see fig. 24a) 
the apertures are also formed by perforating a sheet of cross-section 
paper according to ])roarrangcment, but these apertures are so dis¬ 
tributed that when the grille is turned four times successively through 
angles of 90° and set in four grille positions on the grid, all the cells on 
the grid ai’e disclosed in turn. (The preparation of such grilles will 
be discussed in par. 21.) If lettei*s arc inserted in the cells so disclosed, 
then after a complete revolution of tho grille every one of the cells of 
tho grid will contain a letter and thus the grid will bo completely 
filled. For tliis reason such a giillo is also called a selj-jilling, or an 
automatic-completion grille. The secrecy of messages enciphered by 
its means is dependent upon tho distribution or position of the aper¬ 
tures, the sequence of grille positions on tho grid (i. e., whether in the 
order 1, 2, 3, 4 clockwise; or 1, 3, 4, 2 etc.), and tho route followed in 
inscribing and transcribing tho letters in tJio cells of tho grid. For each 
position of the grille, one-fourth the total number of letters of the 
text is inscribed; hence it is convenient to refer to ^'sectionsof the 
text, it being understood that each section consists of one-fourth the 
total number of letters. 

6. There are two possible procedures so far as the inscription-tran¬ 
scription sequence is concerned. (1) The letters of tho plain text may 
be inscribed in tho cells of tho grid through tho apertures disclosed by 
the grille and then, when tho grid has been completely filled, the 
grille removed, and tho letters transcribed from the grid according to a 
prearranged route; or, (2) the letters of tho plain text may first be 
inscribed in tho cells of the grid according to a prearranged route and 
then the grille applied to the completely-filled grid to give the sequence 

1 The system employed by the French Army in 1886 was of the nature here 
described. 
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of letters forming the cipher text of the transcription process. The 
first method will bo desciibed in c below; the second in e below. 

c. Taldng the simplest mamier of inscribing the letters, that is, 
from left to right and from the top downwards, the letters of the first 
section of the text are inscribed in the cells disclosed by the apertures, 
the grille being in the first position. This is shown in Figure 24b. 
The grille is then given % turn clockwise, brhiging Figure 2 to the top 
left. If the grille has been correctly prepared, none of the cells dis¬ 
closed in the second grille position on tlie grid will be occupied by a 
letter. The letters of tlie second section are then inscribed, this being 
shown in Figure 24c. In Figure 24d and e, the results of inscribing the 
third and fourth sections, respectively, are shown. The letters of the 
cryptogram are then taken out of the completed grid by following any 
prearranged route of transcription. The cryptogram below has been 
transcribed by foUowhig down the columns in succession from left 
to right. 

d. To deciyptograph such a message, the cipher letters are inscribed 
columnwise in a grid 10 by 10 (i. e., one composed of 100 cells, 10 per 
side) and then the grille applied to the square in four consecutive 
positions corresponding to those used in cryptograpliing. The letters 
disclosed by each placement of the grille are written down as they 
appear, section after section. 

e. The second manner of employing a revolving grille is merely the 
reciprocal of the first. The procedure followed in the fii’st method to 
decryptograph a message is followed in the second method to crypto^ 
graph a message; and the procedure followed in the first method to 
cryptograph is followed in the second method to decryptograph. 

18. Grilles of other geometric forms.—Grilles are not limited to 
square-shaped figures. They may be equilateral triangles, pentagons, 
hexagons, and so on. Any figure which can be pivoted upon a central 
point and which when revolved upon this pivot can bo placed in a 
succession of homologous positions over a grid corresponding to the 
grille will servo equally well. A triangle affords three grille positions, 
a pentagon, five, and so on. 

19. Polyphase transposition by grilles.—One grille may be 
employed to inscribe the letters of the message on the grid, and a 
second, and diffei'ent, grille employed to transcribe them from the 
grid to form the final text of the cryptogram. This would constitute a 
real double transposition method of great complexity. Polyphase 
transposition by a series of grilles is of course possible. 

20. Increasing the security of revolving grilles.—a. The total 
number of letters which a grille will exactly encipher is termed its 
capacity. If the number of letters of a message is always equal to 
the total capacity of the grille, tliis information is of great aid in 
solution by the enemy. For example, a message of 64 letters indi¬ 
cates a grille 8 by 8 with 16 apertures; one of 144 letters, a grille 12 

nHlMOn** -4 4-8 
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by 12 with 36 apertures, and so on. There are, however methods of 
employing a grille so that it will servo to encipher messages the 
lengths of which are greater or less than the capacity of the grille. 

b. When the total number of letters is less than the capacity of 
the grille, no modification in method of use is necessary. Encipher¬ 
ment of such a message comes to a close when the last plain-text 
letter has been inscribed. In decryptograpliing such a message, the 
recipient must strike out, on the grid upon which ho is to inscribe 
the cipher text, a number of cells corresponding to the difference 
between the number of letters of the text as received and the total 
capacity of the grille. The location of the cells to bo thus eliminated 
must bo prearranged, and it is best usually to strike them o(F from 
the final positions of the grid. 
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c. When the total number of letters is ecpial to or greater than the 
capacity of the grille, a grid of greater capacity than that of the grille 
can bo prepared, on which the grille may bo iiositioned several times, 
thus forming a largo or composite grid comi)osed by the juxtaposition 
of the several small grids. If there are a few cells in excess of the 
actual number required, these may bo struck off from the largo grid 
at prearranged points, for example, from the last column and row, 
as shown in Figure 25b. The grille is then placed in its first position 
in turn on each of the component grids, then in its second position, 
and so on. An example will serve to illustrate. A message of fifty- 
two lettem is to bo enciphered with the grille shown in Figure 25a, 
the capacity of wdiich is sixteen letters. The number of letters of the 
message being greater than three times sixteen, the composite grid 
must bo composed of four small grids containing a total of sixty-four 
cells. Therefore, twelve of these cells must be eliminated. These 
are shown in Figure 25b, together with the number indicating the 
positions occuiricd by the letters of the text. 
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21. Construction of revolving grilles.— a. There are several 
ways of preparing revolving grilles, of which the one described below 
is the most simple. All methods make use of cross-section paper. 

h. Suppose a revolving grille with a capacity of 100 letters is to bo 
constructed. The cells of a sheet of cross-section paper 10 by 10 are 
numbered consecutively in hands from the outside to the center, in 
the manner shown in Figure 26a. It will be noted that in each band, 
if n is the number of cells forming one side of the band, the highest 
number assigned to the cells in each band is n-l, 

c. It will be noted that in each band there is a quadruplication of 
each digit; the figure 1 appears four times, the figure 2 appears four 
times, and so on. From each receding band there is to be cut out 
(n-l) cells: from the outermost band, therefore, nine cells are to be 
cut out; from the next band, seven; from the next, five; from the 
next, three; and from the last, one cell. In determining specifically 
what cells are to bo cut out in each band, the only rules to bo observed 
are these: (1) One and only one cell bearing the figure 1 is to be cut 
out, one and only one cell bearing the figure 2 is to be cut out, and 
so on; (2) as random a selection as possible is to bo made among the 
cells available for selection for perforation. In Figure 26b is shown 
a sample grille prepared in this way. 

d. If the side of the grille is composed of an odd number of cells, 
the innermost band will consist of but one cell. In such case this 
central cell must not be perforated. 

e. It is obvious that milhons of differently perforated grilles may 
bo constructed. Grilles of fixed external dimensions may bo desig¬ 
nated by indicators, as was done by the German Army in 1915 when 
tliis system was employed. For example, the FRITZ grille might 
indicate a 10 by 10 grille, serving to encipher messages of about 100 
letters; the ALBERT grille miglit indicate a 12 by 12 grUle, serving 
to encipher messages of about 144 letters, and so on. Thus, with a 
set of grilles of various dimensions, all constructed by a central 
headquarters and distributed to lower units, systematic use of grilles 
for messages of varying lengths can be aflnrded. 

/. A system for designating the positions of the perforated cells ol 
a grille may be established between correspondents, so that the 
necessity for physical transmission of grilles for intercommunication 
is eliminated. An example of a possible system is that wliich is based 
upon the coordinate method of indicating the perforations. Tlie 
columns from left to right and the rows from bottom to top aie 
designated by the letters A, B, C, . . . Thus, the grille shown in 
Figure 26b would have the following formula: 

ADG; BBEH; CDJ; DEG; EACH; FFI; GE; HBDHJ; IDG; 
JABFI. 
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0 . Given the formula,, tho eight corners of the grille can be labeled 
in various ways by proarrangement; but the simplest method is 
that shown in connection with Figure 26b. Then the initial position 
of the grille can bo indicated by tho number which appears at the 
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upper left-hand corner when the grille is placed on tho grid, ready for 
use. Thus, position 1 indicates that tlie grille is in position with the 
figure 1 at the upper left-hand corner; position 3, with the figure 3 
at the upper left-hand corner, etc. 
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h. The direction of revolving the grille can be clockwise or counter¬ 
clockwise, so that correspondents must make arrangements before¬ 
hand as to which direction is to bo followed. 

i. Revolving grilles can be constructed so that they have two 
operating faces, an obverse and a reverse face. They may be termed 
Tevolving-reversihle grilles. The principles of their construction merely 
involve a modification of those described in connection with ordinary 
revolving grilles. A revolving-reversible grille will have eight possible 
placement indicators; usually positions 1 and 5, 2 and 6, etc., cor¬ 
respond in this obverse-reverse rclationsliip, as shown in Figure 20. 

j. The principles of construction described above apply also to 
grilles of other shapes, such as triangles, pentagons, etc. 

22. Nonperforated grilles.—a. All the effects of a grille with 
nctual perforations may be obtained by the modified use of a nonper¬ 
forated grille. Let the cells that would normally be cut out in a grille 
indicated merely by crosses thereon, and then on a sheet of cross- 
section paper let the distribution of letters resulting from each place- 
^oent of the grille on a grid be indicated by inserting crosses in the 
appropriate cells, as shown in Figure 27. 


Grille 



















Fiouiie 27a. 


Grille Position 



Figure 27b. 


h. Note should bo made of tho fact tliat in Figure 27b the distribu¬ 
tion of crosses shown in tho third row of cells is the reverse o la 
shown in the first; the distribution shown in the fourth low is le 
^^Verse of that shown in tho second. This rule is applica e o a 
I'evolving grilles and is of importance in solution. 

c. If tho letters of tho text aro now inscribed (normal manner ot 
^1‘iting) in tho cells not eliminated by crosses, and tho letters tiaiis 
Scribed from columns to form tho cryptogram, the results aio t lo same 
though a perforated grille had been employed. Thus. 
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d. It is obvious that a numerical key may be applied to effect a 
columnar transposition in the foregoing method, giving additional 
security. 

e. The method is applicable to grilles of other shapes, such as tri¬ 
angles, ])entagons, hexagons, octagons, etc. 

j. In Figure 27c it is noted that there are many cells that might be 
occupied by letters but are not. It is obvious that these may be filled 
with nulls so that the grid is completely filled with letters. Long 
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Figure 28. 


messages may bo enciphered by the superposition of several diagrams 
of the same dimensions as Figure 27c. 

23. Rectangular or “post card” grilles.—a. The grille shown m 
Figure 28 dilfors from the ordinary revolving grille in that (1) the 
apertures are rectangular in shape, and are greater in width, thus 
permitting of mscribing several lettem in the cells disclosed on the 
grid by each perforation of the grille; and (2) the grille itself admits 
of but two positions with its obverse side u]) and two with its roveise 
side uj). In Figure 28 the apertures are numbered in succession from 
top to bottom in four series, each applying to one position of the 
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grille; the numbers in parentheses apply to the apertures when the 
grille is reversed; the numbers at the corners apply to the four posi¬ 
tions in which the grille may be placed upon the grid. 

6. One of the ways in which such a grille may be used is to write 
the first letter of the text at the extreme left of the cell disclosed by 
aperture 1, the second letter, at the extreme left of the cell disclosed 
by aperture 2, and so on. The grille is retained in the same position 
and the 17th letter is written immediately to the right of the 1st, 
the 18th immediately to the right of the 2d, and so on. Depending 
upon the width of the aperture, and thus of the cells disclosed on the 
grid, 2,3,4... letters may bo inserted in these cells. Wlien all the 
cells have been filled, the grille may then be placed in the second 
position, then the third, and finally, the fourth. 

c. Another way in which the grille may be used is to change the 
position of the grille after the 16th letter has been inserted, then 
after the 32d, 48th and 64th; the 65th letter is then inserted to the 
right of the 1st, the 81st, to tlie right of the 17th, and so on until the 
grid is completed. 

d. Wliole words may, of course, be inserted in the cells disclosed by 
the apertures, instead of individual letters, but the security of the 
latter method is much lower than that of the former. 

e. The text of the grid may be transcribed (to form the cryptogram) 
by following any prearranged route. 

/. The successive positions of a post card grille may be prearranged. 
The order 1, 2, 3, 4 is but one of 24 different sequences in which it may 
be superimposed upon the grid. 

g. A modification of the principles set forth in paragraph 21, dealing 
with the construction of revolving grilles, is applied in the construc¬ 
tion of rectangular or ^'post card grilles. Note the manner in which 
the cells in Figure 29a are assigned numbers; homologous cells in each 
band receive the same number. In Figure 29a there are three bands, 
numbered from 1 to 8, 9 to 16, and 17 to 24. Then in each band one 
and only one cell of the same numbered set of four cells is cut out. 
For example, if cell la is selected for perforation from band 1 (as 
indicated by the check mark in that cell), then a cross is written in 
the other three homologous cells, lb, c, and d, to indicate that they 
are not available for selection for perforation. Then a cell bearing 
the number 2 in band 1 is selected, for example, 2c, and at once 2a, 
b, and d are crossed off as being ineligible for selection, and so on. 

In Figure 29c is shown a grille as finally prepared, the nonshaded cells 
representing apertures. 


3f) 


h. Thegrille, Figure 29c, is a “six-column ”ono, that is the 11 

six coliunns. It is obvious that grilles with any even number™ 
columns of cells are possible. The number of apertures in each band 
should be equal and this number multi])lied by the number of bands 
and then by 4 should C(|unl tlie capacity of the grille, 


Band 1 




the one shown in Figure 29c the capacity is 8 by 3 by 4 or 96 cells; 
this is the same as is obtained merely by itiultiplying the height 0ll 
cells) by the number of columns, 16X6=96. If four letters aw 
inscribed in each rectangle, the capacity of the grille in terms o) 
letters is 384. Tlio grid in this case would, after completion, present 
24 columns of letters, to which a numerical key for a second trans¬ 
position can bo applied in transcription to produce the final text ol 
the cryjitogram. 
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24. Indefinite or continuous grilles.— a. In his Manual of 
Cryptography y Sacco illustrates a type of grille which he has devised 
and which has elements of practical importance. An example of 
such a grille is shown in Figure 29(i. This grille contains 20 
columns of cells, and each column contains 5 apertures distributed 
at random in the column. There are therefore 100 apertures in all, 
and this is the maximum number of letters which may be enciphered 
in one position of the grille. The plain text is inscribed vertically, 
Irom left to right, using only as many columns as may be necessary 
to inscribe the complete message. A 25-letter message would require 
but 5 columns. To form the cryptogram the letters are transcribed 
horizontally from the rows, taking the letters from left to right as they 
appear in the apertures. If the total number of letters is not a 
niiiltiple of 5, sufficient nulls are added to make it so. In decrypto- 
graphing, the total number of letters is divided by 5, this giving the 
number of columns employed. The cipher text is inscribed from left 
to right and top downwards in the apertures in the rows of the indi¬ 
cated number of columns and the plain text then reappears in the 
apertures in the columns, reading downward and from left to riglit. 
(It is, of course, not essential that nulls be added in the encipherment 
to make the length of the cryptogram an exact multiple of 5, for the 
flatter can readily be handled even if this is not done. In decipher- 
iUent the total number of letters divided by 5 will give the number of 
Complete columns; the remainder left over from the division will give 
the number of cells occupied by letters in the last column on the right.) 



Figure 29a. 


b. Such a grille can assume 4 positions, two obverse and two reverse. 
Arrangements must be made in advance as to the sequence in which 
the various j)Ositions will be employed. That is why the grille shown 
iti Figure 29a has the position-designating letter ^^A^^ in the upper 
left-hand corner and the letter “B” (upside down) in the lower right- 
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liand corner. On the obverse side of the grille would he the position- 
designating letters and 
c. In Figure 296 is shown how a message is enciphered. 

Message: 

AM RECEIVING HEAVY MACHINE GUN FIRE FROM HILL SIX TWO ZERO. 



Figure 296. 

Cryptogram: 

EGIIX FNNEA YTHFL RIRMO lOLWE MERVA ERMAH EGSOA ICUEC NVHIZ 


(The letters E and A in the lOtli column are nulls. Coluinns 11 to 20 arc not 
used at all, the irregular right-hand edge of the grille merely indicating that tliis 
portion of the grille remains vacant.) 
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Section VI 

MISCELLANEOUS TRANSPOSITION SYSTEMS 

Paragraph 


Complex route transposition_ 25 

Transposition of groups of letters, syllables, and words.... 26 

Disguised transposition methods__ 27 

Cipher machines for effecting transposition_ 28 


25. Complex route transposition.— a. In Figure 30 a route for 
inscribing letters within a rectangle is indicated by a sequence of 
numbers. The initial point may be at any of the four corners of the 
rectangle, or it may bo at any other point, as prearranged. The 
letters may be inscribed to form tlie rectangle by following the route 
indicated and then transcribed from the rectangle to form the crypto¬ 
gram by following another route; or the letters may be inscribed 
according to one route and transcribed accordingly to the numerical 
route indicated. 
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57 
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58 
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Figure 30. 
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Figure 31. 


6. A variation of the foregoing is that illustrated in Figure 31, 
wherein the inscription follows the route shown liy the arrows. The 
initial point of inscription is indicated by the figure 1, and the final 
point, by the figure 2. 

c. In the foregoing case, the route is a succession of the moves 
made by the king in the game of chess; it forms the so-called ‘^Idng s 
tour^^, in which the playing piece makes a complete or reentrant 
journey covering all cells of the chessboard, each cell being traversed 
only once. A route composed of a succession of moves made by the 
knight, or the so-called ^d^night's tour^^, is also possible, but in order 
to be practical a grid with the cells numbered in succession would have 
to be prepared for the correspondents, since millions of different re¬ 
entrant knight ^s tours can be constructed ^ on a chessboard of the 
usual 64 cells. 

26. Transposition of groups of letters, syllables, and words. 
There is nothing in the previously described methods wliich precludes 
the possibility of their application to pairs of letters, sets of three or 


1 See Ball, W. W. R., Mathematical Recreations and Essays, London, 1928. 
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more letters, or even syllables and whole words t 

their use limited to operations with plain text; they mny bo applied 
as secondary steps after a substitutive process has been completed 
(see Sec. X). 

27. Disguised transposition methods.— a. The system often 
encountered in romances and mystery stories, wherein the message 
to lie conveyed is inserted in a series of nonsignificant words con¬ 
structed with the purpose of avoiding or evading suajiicion, is a species 
of this form of “open” cryptogram involving transposition. The 
“open” or enveloping, apparently innocent text may bo designated 
as the external text; the secret or cryptogi-aphic text may bo designated 
ns tlie internal text. A complicated cxanijile of external or open and 
internal or secret text is that shown in paragraph 16. 

b. Little need be said of the method based upon constructing exter¬ 
nal text the letters of which, at prearranged positions or intervals, 
spell out the internal text. For example, it may bo ])rearranged that 
every fourth letter of the external text forms the scries of letters for 
spelling out the internal text, so that only the 4th, 8th, 12th . . . 
lettere of the external text are significant. The same rule may apply 
to the complete words of the external text, the n, 2n, 3n, . . . words 
form the internal text. The preparation of the external text in a 
suitable form to escape sus])icion is not so easy as might be imagined, 
when efficient, experienced, and vigilant censorship is at woik. Often 
the paragraph or passage containing the secret text is sandwiched in 
between other paragraj)hs added to j)ad the letter as a whole with text 
suitable to form introductoiy and closing matter to help allay sus¬ 
picion as to the presence of secret, liidden text. 

c. A modification of the foregoing method is that in which the 1st, 
fid, 5th, . . . words of a secret message are transmitted at one time 
or by one agency of communication, and the 2d, 4th, 6th, . . . words 
of the message are transmitted at another time or by another agency 
of communication. Numerous variations of this scheme will suggest 
themselves, but they are not to be considered seriously as practical 
methods of secret intercommunication. 

d. Two correspondents may agree upon a specific size of paper and 
a special diagram drawn upon this sheet, the lines of which pass 
through the words or letters of the internal text as they apjiear in the ex¬ 
ternal text. For example, the legsof an equilateral triangle drawn upon 
the sheet of paper can servo for this purpose. This method is practi¬ 
cable only when messages can bo physically conveyed by messenger, by 
the postal service, or by telephotographic means. Many variations 
of tliis basic scheme may perhaps be encountered in censorsliip work. 

28. Cipher machines for effecting transposition. —These may 
be dismissed with the brief statement that if any exist today they are 
practically unknown. A few words are devoted to the subject under 
paragraph 71 
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B. SUBSTITUTION SYSTEMS 

Section VII 

POLYGRAPHIC SYSTEMS 

Paragraph 

Preliminary remarks_ 29 

Monographic and polygraphic substitution--- 

Polygraphic substitution by means of tables.-- 

29. Preliminary remarks.— a. It is assumed that the student has 
absorbed the iiifoiTuation contained in Sections VII to XIII, inclusive, 
Special Text No. 1G5, Elementary Military Cryptography. The 
sections deal with the various types of cipher alphabets, stinple monoal- 
phabetic substitution, monoalphabetic substitution Avith variants, the 
more simple varieties of polyalphabetic substitution, cipher disks, and 
cipher tables. The present study of substitution is a continuation of 
the former, a thorough understanding of which is a requisite to the ex¬ 
amination of the more complex types of substitution now to be set forth. 

6. Before entering upon the study referred to, it will be advisable 
to explain several terms wliicli will bo used. Substitution methods 
in general may be described as being monoliteral or folyliteral in char¬ 
acter. In the former there is a strict letter-for-letter replacement, or, 
to include numerical and symbol methods, there is a one-to-one 
correspondence between the length of the units of tlie plain text and 
those of the cipher text, no matter whether the substitution is mono- 
alphabetic or polyalphabetic in character. In polyliteral methods, 
however, this ‘‘one-to-one’* correspondence no longer holds. A 
combination of two letters, or of two figures, or of a letter and a figure, 
may represent a single letter of the plain text; there is here a two-to- 
one” correspondence, two characters of the cipher text representing 
one of the plain text. The methods described under Section X, Special 
Text No. 165, fall under the latter designation; the cipher equivalents 
there shown are, properly speaking, bipartite in character. Tripai tite 
cipher equivalents are also encountered. Polyliteral methods, there¬ 
fore, are said to employ polypartite alphabets^ of which the bipaitite 
type is by far the most common. Further on in tliis text, polyliteml 
methods of greater complexity than those illustrated in Section X, 
Special Text No. 165, will bo discussed. Attention now will bo directed 
more particularly to a different type of substitution designated as 
monographic and polygraphic substitution. 

30. Monographic and polygraphic substitution, a. All the 
methods of substitution heretofore described are monographic in 
nature, that is, in the enciphering process the individual units sub¬ 
jected to treatment are single letters; there is a letter-for-letter sub¬ 
stitution, or, to include numerical and symbol methods, there is, as 
in the case of monoliteral substitution, a “one-to-one*' correspondence 
between imits of the plain text and those of the cipher text. In poly- 
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graphic substitution, however, combinations of letters of the plain 
text, considered as indivisible compounds, constitute the units for 
treatment in encipherment. If the units consist of pairs of plain-text 
letters, the enciplierment is j)air-for-pair, and is said to bo digraphic 
in character; if the units consist of sets of three letters, it is trigraphic 
in character, and so on. There is still a ^^one-to-one^' correspondence 
involved, but the units in these cases are composite in character and 
the individual elements composing the units affect the cipher equiva¬ 
lents rather than separately. The basic important factor in 

true polygraphic substitution is that all the letters of tlio group parties 
pate in the determination of the cipher equivalent of the group; the 
identity of each letter of the plain-text group affects the composition 
of the whole cipher group. Thus, in a certain digraphic system AB^ 
niay be enciphered as XPe, and ACp, on tlie other hand, may be en¬ 
ciphered as NKc; ft difference in the identity of but one of the letters 
of the plain-text pair here produces a difference in the identity of both 
letters of the cipher pair. 

b. For practical usage polygraphic substitution is limited to the 
handling of digraphs and trigraphs, although very occasionally groups 
of more than three letters may bo employed for special purposes. 

c. The fundamental purpose of polygrapliic substitution is the sup¬ 
pression or rather the elimination of the fi-cquency characteristics of 
ordinary plain text. It is these frequency characteristics which lead, 
sooner or later, to the solution of practically all substitution ciphers. 
When the substitution involves only individual letters in ft mono- 
ftlphabetic system, the cryptogram can bo solved very quickly; when 
it involves individual letters in a polyalphabetic system, the crypto¬ 
gram can usually bo solved, but only after a much longer time and 
niuch more study, depending upon the complexity of the method. 
The basic principle in the solution, however, is to reduce the poly- 
ftlphabetic text to the terms of monoalphabetic ciphers and then to 
solve the latter. ]n true polygra])hic substitution on the other hand, 
the solution does not rest upon the latter basis at all because it is not 
ft question of breaking up a complex text into simpler elements; it 
rests, as a rule, upon the possibility of analysis on the basis of the fre¬ 
quency of the polygraphic units concerned. If the substitution is 
digraphic, then the units are pairs of letters and the normal fre¬ 
quencies of plain-text pairs become of first consideration; if the sub¬ 
stitution is trigraphic, the units are sets of three letters and the normal 
frequencies of plain-text trigraphs are involved. In the last two cases 
the data that can bo employed in the solution are meager, and are 
ar from definite or unvarying in their significance, and that is why 

solution of polygraphic substitution ciphers is often extremely difficult. 
Just as in typography, when certain combinations of letters, such 
h, fi, and ffi, are mounted on one and the same piece of type, they 
a led logotypes or ligatures, so in cryjitography, when combina- 
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tions of two or more letters are to be treated as a unit in a crypto¬ 
graphic process, they may also be called ligatures and can be conven¬ 
iently indicated as being so by placing a bar across the top of the 
combination. Thus, COp represents the digraph CO of the plain text. 
It will also bo convenient to use the Greek letter d to represent a letter of 
the alphabet, without indicating its identity. Thus, instead of the cir¬ 
cumlocution “any letter of the plain text”, the symbol 6p vdll be used; 
and for the expression “any letter of the cipher text”, the symbol 6^ 
will bo used. Tlie symbol Mp then means “any plain-text digraph”; 
the symbol Wo, “ any cipher-text digraph. ” To refer specifically to the 
1st, 2d, 3d . . . mem ber of a ligature, the exponent 1, 2, 3 . . . wll 
be used. Thus, e\ of llEMp is the letter E; of XRZe is Z. 

31. Polygraphic substitution by means of tables.— a. The 
most simple method of effecting polygraphic substitution involves the 
use of tables similar to that shown in Table 1. This table merely 
presents equivalents for digraphs and is to bo employed upon the 
coordinate system, O'p of being sought in the column at the left or 
right, 6\ in the row at the top or bottom. The cipher pair, e'6^c> is then 
found at t^ intersection of the row and column thus indicated. For 
example, AFp=YGo; Mp=AZc, etc. 


Table 1 

(Showing only a partially filled table) 
Final Letter (9^p) 

ABCDEFGHIJK . 


^Pk 


<D 


<D 
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ia N 
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Z 


X Y Z 
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ABCDEFGHIJK 


X Y Z 
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b. The foregoing table is reciprocal in nature; that is, AFp=YG^ 
and YGp=AFc* Thus, a single table serves for enciphering as well as 
for deciphering. The word DEFEND would be enciphered as YA NZ 
CY, and then grouped in fives: YANZC Y . . . . When a final single 
letter occurs, a null is added in order to make a ])air of letters capable 
of being enciphered by the method. Reciprocity is, however, not an 
essential factor and for greater security nonreciprocal tables are more 
advisable. In such cases an enciphering table must have its compK 
mentary deciphering table. 

c. Until the amount of text enciphered by means of such a table 
becomes great enough to disclose the cipher equivalents of the most 
frequently used digraphs, such as EN, ER, RE, TIT, ON, etc., crypto, 
grams based upon the table are relatively secure against solution. 

d. A simple method for preventing the establishment of the fro. 
quencies characterizing these commonly used digraphs and thus elim¬ 
inating the principal basis for their identification is given in paragraph 
52e, 

e. The factor that contributes most to the relatively high degree 

of security of the digraphic method described in a and b above is the 
absence of symmetry in the table employed; for this table is con¬ 
structed by random assignment of values and shows no symmetry 
whatsoever in its ari-angement of contents. Hence, even if 6\ in a 
first case of identical with in a second case, 0^0% 

first case is wholly different from in the second case. For example, 
Table 1 shows that Z^p=ZE’c and ADp=TFc; the cipher resultants 
fail to give any hint that the plain-text pairs contain an identical letter. 

/. If, however, the latter is not the case and the table exliibits 
symmetry in its arrangement of contents, solution is somewhat 
facilitated. Note the following Table 2, for example, in which two 
mixed sequences are employed to form the cipher equivalents. One 
mixed sequence is based upon the keyphraso WESTINGIIOUSE 
AIR BRAKE; the other, upon the keyphraso GENERAL ELEC¬ 
TRIC COMPANY. The word FIRE would bo enciphered as KIQA. 


oUOHJSU 


Table 2 
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g, A cursory examination of Table 2 shows that when 6’^^ is idei^^ 
tical in two cases then 6“^ is identical in these cases, so that in reality 
the encipherment is by no means truly digraphic in character. 
Described in cryptographic terms, the encipherment of d\, is poly^ 
alphabetic in character whereas that of is monoalphabetic. A mor^ 
obvious })icture of this condition is brought out in the following rea^, 
rangement of Table 2. 

Table 3 


OK 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 


A 
B 
C 
D 
E 
F 
G 
H 
I 
J 
K 
L 
a M 
• N 
0 
P 
Q 
R 
S 
T 
U 

V 
W 
X 

Y 
Z 


W E S T I 
E S T I N 


N G 
G H 
H 0 
0 U 


T 
I 
N 
G 
H 
0 

QUA 
U A R 
A R B K 
R B K 
B K C 
K C D 
D F 
F J 
J L 
L M 
M P Q V 
P Q V X 


N 
G 
H 
0 
U 
A 

A R B K 
R B K C 


GHOUARBK 
HOUARBKC 
R B K C D 
B K C D F 
D F J 


QUA 
U A R 
A 


R B K C 
B K C D 


U 
A 

R B K 
B K 
C 
D 
F 
J 
L 
M 
P 
Q 


D 
F 
J 
L 
M 
P 

Q V 
V X 

V X Y 
X Y Z 

Y Z W 


F J 
J L 
L M 


DFJLMPQVXY 
FJLMPQVXYZW 
JLMPQVXYZWE 
LMPQVXYZWES 
MPQVXYZWEST 
PQVXYZWESTI 
QVXYZWESTIN 
ZWESTING 


C 
D 
F 
J 
L 
M 
P 

Q V X Y 

V X Y Z 
X Y Z W 

Y Z W E 
Z W E S 
WEST 

S T I 
TIN 
IMG 


Y Z W E S 
QVXYZWESTINGHO 
VXYZWESTINGHOU 
XYZWESTINGHOUA 
YZWESTINGHOUAR 


F 
J 
L 
M 
P 
Q 

V X 

X Y Z W E 

Y Z W E S 
Z W E S T 
WESTINGHOUARBKCD 
ESTINGHOUARBKCDF 
STING HOUARBKCDFJ 
TINGHOUARBKCDFJL 

A R B K C D 

R B K C D 

B K C D F 


C 
D 
F 
J 
L 
M 
P 

Q 
V 

XYZWESTINGHOUARBKCDFJ 
YZWESTINGHOUARBKCDFJL 
ZWESTINGHOUARBKCDFJLM 


WESTINGH 

ESTINGHO 

STINGHOU 

TINGHOUA 

INGHOUAR 

NGHOUARB 

GHOUARBK 

HOUARBKC 


F J L 
J L M 
L M P 
M P Q 
P Q V 
Q V X 


OK GENRALCTIOMPYBDFHJKQSUVWXZ 


By a sliglit modification in arrangement but with no change in 
basic principle, the encipherment can bo made monoalphabetic so 
far as 0^^ is concerned, and polyalphabetic so far as is concerned. 
Note Table 4. 
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Table 4 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 

A W 
B E 
C S 
D T 
E I 
F N 
G G 
H H 
I 0 
J U 
K A 
L R 
M B 
N K 
0 C 
P D 
Q F 
R J 
S L 
T M 
U P 

V Q 
W V 
X X 

Y Y 
Z Z 

i. The results given by Table 3 or Table 4 may be duplicated by 
using sliding alphabets, as shown in Figures 32 and 33. In the former, 
which corresponds to Table 3, Alphabets I and IV arc fixed, II and III 
are mounted upon the same strip, which is movable. To use these 
alphabets in encipherment, of is located on Alphabet II and 
Alphabets II-III arc shifted so that d\ is beneath A on Alphabet I; 

is now sought in Alphabet I and found under it on 

Alphabets III and IV, respectively. Thus, for the word lIRE the 
successive positions of the alphabet strips arc as shown below, yielding 
the cipher resultant KIQA. 


I—ABCDEFGHIJKLMNOPQRSTUVWXYZ.- - .Fixed alphabet 

-J lI-FGHIJKLMNOPQRSTUVWXYZABCDEl Movable alphabet 

/ip ivio in_NGHOUARBKCDFJLMPQVXYZWESTlJ 

IV—GENRALCTIOMPYBDFHJKQSUVWXZ_Fixed alphabet 

I—ABCDEFGHIJKLMNOPQRSTUVWXYZ_Fixed alphabet 

m =(14 II-RSTUVWXYZABCDEFGHIJKLMNOPQl .Movable alphabet 

^ ^ ° III—JLMPQVXYZWESTINGHOUARBKCDFJ.. " 

IV—GENRALCTIOMPYBDFHJKQSUVWXZ.Fixed alphabet 

Figure 32. 


GENRALCTIOMP 

ENRALCTIOMPY 

NRALCTIOMPYB 

RALCTIOMPYBD 

ALCTIOMPYBDF 

LCTIOMPYBDFH 

CTIOMPYBDFHJ 

TIOMPYBDFHJK 

lOMPYBDFHJKQ 

OMPYBDFHJKQS 

MPYBDFHJKQSU 

PYBDFHJKQSUV 

YBDFHJKQSUVW 

BDFHJKQSUVWX 

DFHJKQSUVWXZ 

FHJKQSUVWXZG 

HJKQSUVWXZGE 

JKQSUVWXZGEN 

KQSUVWXZGENR 

QSUVWXZGENRA 

SUVWXZGENRAL 

UVWXZGENRALC 

VWXZGENRALCT 

WXZGENRALCTI 

XZGENRALCTIO 

ZGENRALCTIOM 


YBDFHJKQSUVWXZ 
BDFHJKQSUVWXZG 
DFHJKQSUVWXZGE 
FHJKQSUVWXZGEN 
HJKQSUVWXZGENR 
JKQSUVWXZGENRA 
KQSUVWXZGENRAL 
QSUVWXZGENRALC 
SUVWXZGENRALCT 
UVWXZGENRALCTI 
VWXZGENRALCTIO 
WXZGENRALCTIOM 
XZGENRALCTIOMP 
ZGENRALCTIOMPY 
GENRALCTIOMPYB 
ENRALCTIOMPYBD 
NRALCTIOMPYBDF 
RALCTIOMPYBDFH 
ALCTIOMPYBDFHJ 
LCTIOMPYBDFHJK 
CTIOMPYBDFHJ KQ 
TIOMPYBDFHJKQS 
10 MPYBDFHJKQSU 
OMPYBDFHJKQSUV 
MPYBDFHJKQSUVW 
PYBDFHJKQSUVWX 
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j. To correspond with Table 4 the alphabet strips are arranged as 
shown in Figure 33. Here Alphabets I and II are fixed, III and IV 
are mounted upon the same movable strip. To use these alphabets 
in encipherment, 0\ of is located on Alphabet IV and Alphabets 
III-IV are shifted so that (Ip) is beneath A on Alphabet I; (Fp) 
is now sought in Alphabet I and will be found under it on Alpha¬ 
bets II and III, respectively. Thus, for the word FIRE, the succes¬ 
sive positions of the alphabet strips are as shown below, yielding the 
cipher resultant NBJU. 




I—ABCDEFGHIJKLMNOPQRSTUVWXYZ 

11—WESTINGHOUARBKCDFJLMPQVXYZ 

III— IOMPYBDFHJKQSUVWXZGENRALCT 

IV— IJKLMNOPQRSTUVWXYZABCDEFGH 


_Fixed alphabet 

_Fixed alphabet 

Movable alphabet 




I—ABCDEFGHIJKLMNOPQRSTUVWXYZ..Fixed alphabet 

II—WESTINGHOUARBKCDF JLMPQVXYZ__Fixed alphabet 

III— ALCTIOMPYBDFHJKQSUVWXZGENR1 

IV— EFGHIJKLMNOPQRSTUVWXYZABCDJ- 

Figure 33. 


. Movable alphabet 


k. Neither Table 3 nor Table 4 presents the possibilities such tables 
might afford for digraphic substitution. They may, however, be 
rearranged so as to give results that will approach more closely to the 
desired ideal as to nonrelationship between cipher equivalents of 
plain-text pairs having an identical letter in common. Note that in 
Table 5, which is based upon the same primary ali)habets as Table 3 
and Table 4, the cipher equivalents are the same as in the latter 
tables, but they have been so distributed as to eliminate the unde¬ 
sirable and externally obvious relationsliip referred to. (In any 
table of this nature there can be only 676 different pairs of equiva¬ 
lents, since the table presents merely the permutations of the 26 
letters taken two at a time. It is the distribution of the j)airs which 
is important.) 

L Table 5 still shows symmetry in its construction, and a suspicion 
of its existence formed during the preliminary stages of cryptanalysis 
would aid materially in hastening final solution. 

m. The foregoing tables have all been digraphic in nature, but a 
kind of false trigraphic substitution may bo also accomplished by 
means of such tables, as illustrated in the accompanying Table C, 
which is the same as Table 5 with the addition of one more alphabet 
at the top of the table. 
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Table 5 



A 

B 

C 

D 

E 

F 

G 

H 

I 

J 

X 

L 

u 

F 

0 

P 

q 

B 

S 

2 

TJ 

7 

W 

X 

T 

Z 


W 

E 

S 

T 

X 

N 

G 

H 

0 

U 

A 

B 

B 

K 

C 

D 

F 

J 

L 

H 

P 

q 

7 

X 

Y 

z 

A 

Z 

X 

W 

V 

V 

S 

q 

X 

J 

H 

F 

D 

B 

T 

P 

U 

0 

I 

T 

C 

L 

A 

R 

R 

E 

G 

B 

s 

S 

T 

I 

N 

G 

H 

0 

u 

A 

R 

B 

X 

0 

D 

F 

J 

L 

M 

P 

q 

7 

X 

Y 

Z 

W 

0 

z 

X 

W 

V 

TJ 

S 

q 

X 

J 

H 

F 

D 

B 

Y 

P 

M 

0 

I 

T 

c 

L 

A 

R 

R 

£ 


s 

T 

I 

N 

G 

H 

0 

u 

A 

R 

B 

X 

C 

D 

F 

J 

L 

M 

P 

q 

7 

X 

Y 

Z 

W 

E 

C 

B 

0 

z 

X 

W 

V 

TJ 

s 

q 

X 

J 

H 

F 

D 

B 

Y 

P 

U 

0 

I 

T 

C 

L 

A 

R 

R 


T 

I 

K 

G 

H 

0 

U 

A 

B 

B 

X 

0 

D 

F 

J 

L 

M 

P 

q 

7 

X 

Y 

Z 

R 

E 

S 

B 

K 

E 

0 

Z 

X 

W 

V 

U 

S 

q 

X 

J 

H 

F 

D 

B 

Y 

P 

u 

0 

I 

T 

C 

L 

A 

R 


I 

N 

a 

H 

0 

U 

A 

R 

B 

X 

c 

D 

F 

J 

L 

M 

P 

q 

7 

X 

Y 

Z 

W 

E 

S 

T 

Jb 

B 

K 

E 

G 

z 

X 

W 

V 

U 

s 

q 

X 

J 

H 

F 

D 

B 

Y 

P 

M 

0 

I 

T 

C 

L 

A 


F 

a 

H 

0 

u 

A 

B 

B 

K 

0 

D 

F 

J 

L 

U 

P 

q 

7 

X 

Y 

Z 

TT 

E 

S 

T 

I 


A 

R 

N 

E 

G 

Z 

X 

71 

V 

u 

s 

q 

X 

J 

H 

F 

D 

B 

Y 

P 

M 

0 

I 

T 

C 

L 


a 

H 

0 

U 

A 

R 

B 

X 

C 

D 

F 

J 

L 

M 

P 

q 

7 

X 

Y 

Z 

ff 

E 

S 

T 

I 

R 


L 

A 

R 

N 

E 

G 

Z 

X 

W 

V 

u 

s 

q 

X 

J 

3 

F 

D 

3 

Y 

P 

U 

0 

I 

T 

C 


H 

0 

U 

A 

R 

B 

K 

0 

]) 

F 

J 

L 

M 

P 

q 

7 

X 

Y 

Z 

W 

E 

S 

T 

I 

N 

G 

E 

C 

L 

A 

R 

N 

E 

G 

z 

X 

W 

7 

U 

S 

q 

X 

J 

H 

F 

D 

B 

Y 

P 

M 

0 

I 

T 


0 

U 

A 

R 

B 

X 

0 

D 

F 

J 

L 

M 

P 

q 

7 

X 

Y 

Z 

ff 

S 

S 

T 

I 

R 

G 

3 

I 

T 

C 

L 

A 

R 

N 

E 

G 

Z 

X 

W 

7 

U 

s 

q 

X 

J 

H 

F 

D 

B 

Y 

P 

R 

0 

I 


U 

A 

R 

B 

X 

C 

D 

F 

J 

L 

M 

P 

q 

7 

X 

Y 

Z 

W 

E 

S 

0? 

I 

R 

G 

3 

0 

J 

I 

T 

C 

L 

A 

R 

N 

E 

G 

Z 

X 

TT 

7 

U 

s 

q 

X 

J 

3 

F 

D 

B 

Y 

P 

M 

0 


A 

B 

B 

K 

0 

D 

F 

J 

L 

M 

P 

q 

7 

X 

Y 

z 

W 

E 

S 

T 

I 

N 

G 

3 

0 

U 

Z 

0 

I 

T 

C 

L 

A 

R 

N 

E 

G 

z 

X 

w 

7 

U 

s 

Q 

X 

J 

3 

F 

D 

B 

Y 

P 

M 


B 

B 

K 

b 

D 

F 

J 

L 

li 

P 

q 

7 

X 

Y 

Z 

7t 

E 

s 

5 

t 

R 

G 

3 

0 

U 

A 

L 

M 

0 

I 

T 

C 

L 

A 

B 

N 

E 

G 

Z 

X 

W 

7 

U 

S 

q 

K 

J 

3 

F 

D 

B 

Y 

P 


B 

K 

C 

D 

F 

T~ 

L 

M 

F- 

q 

7 

yi 

i 

Z 

W“ 

E 

s 


1 

N 

G 

a 

0 

tl 

A 

R 

•Ir M 

P 

M 

0 

I 

T 

c 

L 

A 

R 

K 

E 

G 

z 

X 

w 

7 

u 

s 

A 

K 

J 

3 

F 

D 

B 

Y 


Z 

Y 

X 

V 

q 

p 

M 

h 

J 

F 

D 

C 

X 

B 

R 

A 

u 

0 

H 

G 

R 

I 

T 

S 

£ 

W 

F 

Z 

a 

E 

N 

B 

A 

L 

C 

T 

I 

0 

u 

p 

Y 

3 

D 

F 

3 

J 

X 

A 

S 

U 

7 

R 

X 


T 

X 

V 


p 

u 

L 

J 

F 

U 

0 

X 

B 

R 

A 

D 

0 

H 

G 

R 

1 

T 

S 

E 

W 

z 

0 

X 

z 

a 

E 

N 

R 

A 

L 

C 

T 

I 

0 

U 

P 

Y 

B 

D 

F 

3 

J 

X 

A 

S 

TJ 

7 

w 


r" 

7” 


P” 

ir 

JT 


F 

D 

C 

x 

B 

R 

A 

U 

0 

H 

G 

H 

I 

T 

s 

3 

71 

Z 

Y 

P 

w 

X 

z 

G 

E 

N 

R 

A 

L 

c 

T 

I 

0 

M 

P 

Y 

B 

D 

F 

3 

J 

K 

q 

S 

TJ 

7 


y 


p 

U 

L 

J 

F 

D 

C 

X 

B 

B 

A 

U 

0 

H 

G 

N 

1 

T 

S 

E 

W 

*7 

Y 

X 

Q 

V 

ff 

X 

z 

G 

E 

N 

B 

A 

L 

C 

T 

I 

0 

u 

P 

Y 

B 

D 

F 

3 

J 

X 

q 

S 

TJ 


Q 

p 

M 

L 

J 

F 

D 

C 

K 

B 

B 

A 

U 

0 

H 

G 

R 

I 

i! 

S 

S 

7! 

z 

Y 

X 

7 

E 

TJ 

V 

F 

X 

Z 

G 

£ 

N 

R 

A 

L 

C 

T 

I 

0 

U 

P 

Y 

B 

D 

F 

3 

J 

K 

A 

S 


fF“ 

sr 

L 

7“ 

F 

D 

C 

t 

B 

H 

A 

U 

0 

H 

G 

it 

i 


S 

3 

W 

Z 

Y 

X 

7 

q 

S 

s 

u 

V 

w 

X 

z 

G 

E 

11 

R 

A 

L 

C 

T 

I 

0 

u 

p 

Y 

B 

D 

F 

3 

J 

X 

A 


u 

Q 

L 

J 

F 

D 

C 

X 

B 

0 

R 

E 

A 

U 

0 

H 

G 

N 

r" 

T 

s 

E 

W 

Z 

Y 

X 

V 

q 

p 

T 

s 

T7 

V 

W 

X 

z 

N 

R 

A 

L 

C 

T 

I 

0 

M 

P 

Y 

B 

D 

F 

3 

J 

K 

TJ 

L 

kr 

F 

D 

C 

X 

B 

R 

A 

U 

0 

H 

G 

H 

I 


S 

S 

W 

Z 

Y 

X 

B 

V 

q 

p 

u 

X 


S 

U 

V 

w 

X 

z 

G 

E 

N 

R 

A 

L 

C 

T 

I 

0 

M 

P 

Y 

D 

F 

H 

J 

V 

J 

J 

F 

K 

D 

C 

s 

X 

u 

B 

V 

R 

\y 

A 

X 

U 

Z 

0 

G 

H 

E 

G 

N 

N 

R 

I 

A 

T 

L 

s 

c 

s 

T 

w 

I 

Z 

0 

Y 

M 

X 

P 

7 

Y 

q 

B 

p 

D 

VL 

F 

L 

3 

TT 

H 

D 

J 

C 

K 

K 

q 

B 

S 

R 

U 

A 

V 

u 

w 

0 

X 

H 

Z 

G 

G 

H 

E 

I 

11 

T 

R 

S 

A 

E 

L 

71 

C 

z 

T 

Y 

I 

X 

0 

7 

R 

q 

p 

P 

Y 

li 

B 

T 

L 

D 

T 

J 

F 

P 

X 

D 

F 

C 

H 

K 

J 

3 

K 

R 

q 

A 

s 

u 

u 

0 

V 

H 

W 

G 

X 

N 

Z 

I 

G 

T 

E 

S 

N 

E 

R 

W 

A 

t 

L 

Y 

C 

X 

T 

7 

I 

q 

0 

p 

n 

III 

P 

L 

Y 

0 

B 

X 

D 

T 

C 

D 

t 

F 

B 

H 

R 

J 

—JL 

A 

K 

U 

0 

s 

H 

u 

G 

V 

R 

W 

I 

X 

T 

Z 

S 

G 

£ 

E 

W 

R 

Z 

R 

i 

A 

X 

L 

V 

C 

q 

T 

p 

I 

li 

0 

L 

M 

J 

P 

F 

Y 

D 

B 

Z 

K 

B 

B 

D 

R 

F 

A 

H 

U 

J 

.Jjt 

0 

X 

H 

A. 

G 

S 

N 

U 

I 

V 

T 

\7 

S 

X 

E 

Z 

71 

G 

Z 

E 

Y 

R 

X 

B 

7 

A 

q 

L 

P 

C 

M 

T 

L 

I 

J 

0 

F 

M 

D 

P 

C 

Y 
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Table 6 

III. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

I 
A 
B 
C 
D 
E 
F 
G 
H 
I 
J 
K 
L 
M 
N 
0 
P 
Q 
R 
S 
T 
U 

V 
W 
X 

Y 
Z 



n. In using tliis table, O^p is located in Alphabet I, and its equivalent, 
taken from Alphabet II; 6^p is located in Alphabet III, and its 
equivalent, taken from Alphabet IV; O^c is the letter lying at the 
intersection of the row indicated by O^p in Alphabet I and the column 
determined by 0%. Thus, FIRE LINES would bo enciphered NNZ 
lEQ KOV. It is obvious, however, that only the encipherment of 
is polyalphabetic in character; and O^p are enciphered purely 
monoalphabetically. Various other agreements may be made with 
respect to the alphabets in wliich the plain-text letter will be sought 
m such a table, but the basic cryptographic principles are the same as 
in the case described. 

0. Digraphic tables employing numerical equivalents instead of 
letter equivalents are, of course, possible but in this case the number 
of equivalents required, 676, means that combinations of three figures 
must be used. 
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Section VIII 

CHECKERBOARD DIGRAPHIC SUBSTITUTION 

Paragraph 


Disadvantages of large tables_____ 32 

Four-alphabet checkerboards_ 33 

Two-alphabet checkerboards__ 34 

One-alphabet checkerboards; Playfair Cipher__ 35 

Rectangular designs_ 36 

Combined alphabetical and numerical checkerboard_ 37 


32. Disadvantages of large tables.—Digraphic substitution by 
means of tables such as those illustrated in Tables 1, 2, and 5 is 
impractical for military use on account of the ^-elatively large size that 
tlio table takes, and the inconvenience in their production, change, 
distribution, and handling. Just as it has been noted in Section XII, 
Special Text No. 165, Elementary Military Cryptography, that simple 
sliding alphabet strips can replace largo quadricular tables, so it 
will be found that small designs similar to a checkerboard can replace 
the large quadricular tables in digraphic substitution. Although the 
usual chess or checkerboard is based on a square 8 by 8, \nih 64 cells, 
the term checkerboard will here bo used to designate any square design 
with cells. 

33. Four-alphabet checkerboards.—a. The simple or single¬ 
alphabet checkerboard consists of a square 5 by 5, containing 25 cells 
in which the letters of a 25-element alphabet (I and J being inter¬ 
changeable) are inserted in any prearranged order. When four such 
checkerboard alphabets arc arranged in a large square as shown in 
Figure 34, the latter may be employed for digraphic substitution to 
yield the same ciphei^esults as does tlie much larger Table 1 (par. 31). 
In this sciuaro, of 60^ is sought in section 1; in section 2. Thus, 

and will always form the northwest-southeast corners of an 
imaginary rectangle delimited by these two letters as located in these 
two sections of the square. Tlicn 0\ and 0^^ are, respectively, the 
letters at the northeast-southwest corners of thi s same rectangle. 
Thus, l475p=fZc; UB^=WPc, etc. In 

decryptographing, and are sought in sections 3 and 4, respectively, 
and tlieir equivalents, and noted in sections 1 and 2, respec¬ 
tively. It may, of course, bo prearranged that should bo sought 
in the section now labeled 3, 6%y in that labeled 4, whereupon would 
be located in the section now labeled 1, in that now labeled 2. 








Sec. 1 (0'p) 


Sec. 4 {e\) 
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1 
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Z 
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Z 
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Sec. 3 (0'o) 


Sec. 2 {9\) 


Figure 34. 


b. It is possible to construct a digraphic substitution c heck er boar d 
that shows reciprocity in its 60p=00o relationship so that if ABp=XYoi 
for example, then jd^p=Z«„. Two conditions arc essential to assure 
reciprocity. These are taken into con.sideration in the cstablishnient 
of the or deciphering sections, and an example will serve to 
explain the process. 

c. Two enciphering alphabets are first constructed; one in section 1 
for 0\, the other in section 2 for d%, as shown in Figure 35a. The 
alphabet in section 3 is now to be constructed. Any horizontal row 
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S 

A 

E 

W 

L 







G 

'Z 

Q 

N 

R 







T 

H 

I 

F 

U 


1 2 3 4 5 


Figure 36a. 


Sec. 3 (O'.) 
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of section 1 is taken, for example, the row labeled 1, consisting of the 
letters BWGRM, and these letters are written on any horizontal row 
of section 3, in any transposed order, which is immediately written 
at the top of section 3, as shown in Figure 35b. 
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Row 1 of section 1 was inserted in row 4 of section 3. The recip¬ 
rocal permutation of 1 4 is 4 1, and therefore row 4 of section 1 must 
now be inserted in row 1 of section 3, and in the transposed order 
5-2-4-1-3, as indicated at the top of section 3. The result is showm 
in Figure 35c. Then row 2 of section 1 is transferred to another row 
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of section 3, for example, the fifth, and the letters inserted in the 
already indicated transposed order. Immediately thereafter, in ord^r 
to continue the reciprocal permutation relationship, row 5 of section 
1 becomes row 2 of section 3. This leaves row 3 of section 1 to become 
also row 3 of section 3, and to bo reciprocal to itself. The result is 
shown in Figure 35d, where section 3 is completely constructed. The 
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foregoing principle of permutation reciprocity applies equally to the 
rows of section 4. Suppose the permutation 3-5-1-4-2 is decided 
upon for the rows of section 4. This means that rows 1 and 3 of 
section 2 become rows 3 and 1 of section 4; rows 2 and 5 of section 2 
become 5 and 2 of section 4; row 4 of section 2 becomes row 4 of 
section 4. As regards the transposed order within the rows of section 
4, the following rule aj)plies: The letters forming a complete column 
from the top of section 3 to the bottom of section 2, whatever their 
order, must also form a complete column from the top of section 1 
to the bottom of section 4. For example, the column designated by 
the number 5 of section 3 contains the letters OHKMECOSGT; 
column 5 of section 1 contains five of these letters, MEKOH; there¬ 
fore, the completed column must contain the letters, COSGT but 
in the transposed order given by the permutation selected for the 
rows of section 4, viz, 3-5-1-4-2. 

The completed square is then as sl^vn in Figure 35e, and exhibits 
reciprocity throughout. Example: BBp=LWo, and LWp=BBo. 
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Figure 36e. 


d. The total number of reciprocal permutations of five elements is 
26, as follows: 




(1) 12345 



(2) 12354 

(7) 14325 

(12) 21354 

(17) 34125 

(22) 45312 

(3) 12435 

(8) 14523 

(13) 21435 

(18) 35142 

(23) 52341 

(4) 12543 

(9) 15342 

(14) 21543 

(19) 42315 

(24) 52431 

(5) 13245 

(10) 15432 

(15) 32145 

(20) 43215 

(25) 53241 

(6) 13254 

(11) 21345 

(16) 32164 

(21) 42513 

(26) 54321 


Since the row permutations of sections 2 and 4 are independent, the 
total number of difl’crent four-alphabet squares as regards row permu¬ 
tations is 26^=676. Taking into account the column permutations, 
5X4X3X2X1 in number, it is therefore possible to have 676X120 
or 81,120 different, four-alphabet checkerboards of this nature, based 
upon the same two alphabets in sections 1 and 3. With changes in 
the latter, tlie number, of course, becomes very much greater. 

34. Two-alphabet checkerboards.—a. It is possible to effect 
digraphic substitution with a checkerboard consisting of but two 
sections by a modification in the method of finding equivalents. 
In the checkerboard shown in Figure 36, 6^^ of is located in the 
square at the left, ^‘^p, in the square at the right. 

When are at the opposite ends of the diagonal of the imaginary 
rectangle defined by the letters, are at the opposite ends of the 
other diagonal of the sa me re ctangle, jus t as in t he p re cedi ng case. 
For example, ALp=TTc; DOp=GAc; ATp=TAc; EHp=liEc. 

6. Keciprocity may be imparted to the 2-section checkerboard by 
reciprocal permutation of the rows of the checkerboard, no attempt 
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Figure 36. 


e\d\ 


being jnado to effect any reciprocal pcriiuitation of columns. Figure 
37 shows such a checkerboard. 


1 

M 

A 

N 

U 

F 

0 

S 

Q 

L 

P 

4 

2 

C 

T 

R 

I 

G 

W 

Z 

Y 

V 

X 

5 

3 

B 

D 

E 

H 

K 

D 

K 

H 

B 

E 

3 

4 

L 

0 

P 

Q 

S 

A 

F 

U 

M 

N 

1 

5 

V 

W 

X 

Y 

Z 

T 

G 

I 

C 

R 

2 


Figure 37. 


Here, for example, AWp=OTo and OTi,=AWc; BAp=DLo and 
DLp=BAc, etc. 

c. In 2-alphabet checkerboards in wliich one section is dii*ectly 
above the other, reciprocity already exists without special prepara¬ 
tions for its production. In Figure 38, MOp=UAo and UAp=MOc; 
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MAp=MAc and MAc=MAp. When both 0'p and happen to l)o in 
the same column, there is really no encipherment, a fact wliicli con¬ 
stitutes an important disadvantage of this method. This disadvan¬ 
tage is only slightly less obvious in the preceding cases where the 
cipher equivalent of such a case of consists merely of the plain¬ 
text letters in reversed order, yielding 
36. One-alphabet checkerboards; Playfair Cipher.—a. By 
reducing the checkerboard to one alphabet, there results the square 
of the well-known Playfair Cipher, used for many years as a field 
cipher in the British Army. For a short time, 1917-18, it was 
prescribed as a field cipher for use in the United States Army. A 
modification in the method of finding cipher equivalents has been 
found useful in imparting a greater degree of security than that 
afforded in the preceding types of checkerboard methods. Figure 39 
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Figure 39. 


shows a typical Playfair square. The usual method of encipherment 
can be best explained by examples given under four categories: 

(1) Members of the plain-text ])air, 0'p and 0%, are at oppo.site ends of 
the diagonal of an imaginary rectangle defined by the two letters; the 
members of the cipher-text pair, 0^c and 0^e, are at the opposite ends 

of the_oth er dia gon al of tliis imaginary rectangle. Examples: 

MOp=ALe; m!p=UCc; LUp=(^Ie; VIp=YCc. 

(2) 0'p and 0^p are in the same row; the letter immediately to the 
right of 0‘p forms 0\, the letter immediately to the right of 0^p forms 
0\. Wlien either 0\ or 0^p is at the extreme right of the r ow, the first 
letter in th e row be com es its 0^. Examples: MAp=ANc; MUp=AFe; 
AFp=NMc;FAp=MNo. 

(3) 0^p and 0^p are in the same column; the letter immediately below 
0\ forms 0*0, the letter immediately below 0^p fonns 0%. When either 
0'p or 0‘p is at the bottom of the column, the top let ter in that cohunn 
becomes its 0^. Examples: MCp=CBc; AWp=TAo; WAp=ATo; 
QUp=YIo. 
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(4) ^‘p and ^^p are identical; they ere to be separated by inserting a 
null, usually the letter X or Q. For example, the word BATTLES 
would be enciphered thus; 

BA TX TL ES 
DM RW CO KP 

b. The Playfair square is au tomatically reciprocal so far as encipher¬ 
ments of typo (1) above are concerned; but this is not true of encipher¬ 
ments of typo (2) or (3). 

36. Rectangular designs.— a. It is not essential that checker¬ 
boards for digraphic substitution be in the shape of perfect squares; 
rectangular designs will servo equally well, with little or no modifica¬ 
tion in procedure. In four-alphabet and two-ali)habet rectangles 
reciprocity can bo produced by following the method indicated in 
paragraph 33. 

b. In Figures 40 and 41 arc shown two examples of such rectangles, 
together with illustrations of encipherments. Since the English 
alphabet consists of 26 letters, a number which can only form an 
impracticable rectangle 2 by 13, and since the addition of any symbols 
such as the digits 1,2, 3 ... to augment the number of elements to 27, 
28, 30, 32, 35, or 36 characters woidd result in j)roducing cryptograms 
containing intermixtures of letters and figures, the only practicable 
scheme is to reduce the alphabet to 24 letters as shown in the figures, 
where I serves also for J and U also for V. 
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Fiouke 41. 

Examples: 

Plain: TH ER EA RE BE TT ER CR YP TO GR AM 
Cipher: BS ME MS PR TM FQ ME HN DN BQ XE WE 


c. Two-alphabet rectangles are also possible; it is thought iiimeces- 
sary to demonstrate them by specific examples. The general exam¬ 
ples shown in b above are considered sufficient. 

d. It is possible, however, and it may be practicable to extend the 
alphabet to 28, 30, or more characters by the subterfuge now to be 
explained. Suppose one of the letters of the alphabet is omitted from 
the set of 26 letters, and suppose it is replaced by 2, 3, or more 2 >air« of 
letters, each pair having as one of its members the omitted single 
letter. Thus, in the case of a one-alphabet Playfair design of rec¬ 
tangular shape, in which tlie letter K is omitted as a single letter, and 
the number of characters in the rectangle is made a total of 30 by the 
addition of five combinations of K with other letters, the rectangle 
shown in Figure 42 may be constructed. An interesting consequence 
of this modification is that certain iiTegularities arc introduced in the 
cryptogram, consisting in (1) the occasional replacement of by 

f'hat is , of a dig raph b y a trigraph, (2) less frequently, the re¬ 
placement of 6^d^d\ by is, of a trigraph by a tetragraph, 

and (3) the appearance of variant values. For examp le, AMp= 
HpJc;GLp=OKOe;JKp=KAKEe;CKp=BKEe, or DKEcOrGP„or 
TPc. So far as the decryptographing is concerned, there would l)e no 
difficulty, because tlie oj)erator always considers any K occurring in 
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Figure 42 . 


the ciplier text as invariably forming a ligature with the siicceeduig 
letter, taldng the pair of letters as a unit . In decryptographing a set 
of letters, such as GPcj obtains CKOp,* ho disregards the 0. 

As a final note it may be added that it is, of course, possible to 
insert the letters within a checkerboard or a rectangle in a less sys¬ 
tematic order than that indicated in the various examples. 7%^ 
letters may be inserted at random or by Jollowi/ny the 'principles of 
tematicallp’^mixed alphabets^ so that no definite sequence is apparent in 
the checkerboard or rectangle, 

37. Combined alphabetical and numerical checkerboard.—a. 
In Figure 43 is shown a 4-scctiou checkerboard which presents a 
rather interesting feature in that it makes possible the substitution of 
3-figure combinations for digraphs in a unique manner. To encipher 
a message one proceeds as usual to find the numencal equivalents of a 
pair, and then these numbers are added together. Thus: 

J^Iain text: PK OC EE DI NG 
275 350 100 075 325 
9 13 24 18 7 

Cipher text: 284 363 124 093 332 
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b. To decipher such a cryptogram, take the greatest mtiltipic of 
25 contained in the group of three digits; this multiple and its re¬ 
mainder form the elements for doterniining the plain-text pair in the 
usualmanner. Thus, 284=275+9=rR. 

Section IX 

COMPLEX SUBSTITUTION SYSTEMS 

Paragraph 


Preliminary remarks....... 38 

Continuous or nonrcjjeating-key systoins_ 39 

Auto-key systems__ 40 

Progressive-alphabet systoins_ 41 

Interrupted or variable-key systems_ 42 

Suppressing periodicity by encipherment of variable-length groupings of 

the plain text_ 43 

Suppressing periodicity by encipherment by variable-length groupings of 

the key_ 44 

Mechanical cryptographs in which periodicity is avoided_ 45 


38. Preliminary remarks.—In paragraph G3, Special Text No. 
165, brief reference was made to more complex substitution 8yst.enis. 
It was stated that there are certain ])olyalphabetic methods in whicli 
periodicity is absent; there are other methods in wliich tlie external 
manifestation of periodicity in cryptograms is prevented, or in wliich 
it is suppressed or disguised. Slight liints were then given as to the 
nature of some of these methods. This and the next tw^o sections of 
the present text are devoted to a more detailed description and dis¬ 
cussion of the methods indicated, which, as a class, may be designated 
as o^periodic systems, as contrasted with the previously described, more 
simple, periodic systems. 

39. Continuous or nonrepeating-key systems.— o. One of the 
simplest methods of avoiding periodicity occasioned by the employ¬ 
ment of more than one substitution alphabet is to use us tlie key for 
the encipherment of one or more messages a series of letters or char¬ 
acters that does not repeat itself. The running text of a book, 
identical copies of which are in possession of the correspondents, may 
serve as the key for this purpose. It is only necessary for the cor¬ 
respondents to agree as to the starting point of the key, or to arrange 
a system of indicating this starting point in the text of the ciypto- 
gram. Such a system is called a continuous-key system. Ollier 
names applied to it are nonrepeatingy runningj or indefinite-key systems. 
Telephone directories, the Bible, standard reference w’-orks, etc., are 
often used as source books for such keys. 

b. Various types of cipher alphabets may be employed in lliis 
system, direct or reversed standard alphabets, mixed alphabets draw n 
up at random, or secondaiy mixed alphabets resulting from the inter¬ 
action of two primary sliding mixed components. 

689405*—44-5 
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c. As an example of the method of cryptographing, suppose the 
following message is to bo enciphered on the continuous key prin¬ 
ciple, using as the key the text of this subparagraph, beginning AS 
AN EXAMPLE . . . , and reversed standard alphabets: 

HEAVY INTEKDICTION FIRE FALLING AT ... • 

Key text: ASANE XAMPL EOFTH EMETH ODOFC RYPTO . . • 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT . . . 

Cryptogram: TOASG PNTLU BGDAZ QZZLQ KYOUR JLJTV . • . 

40. Auto-key systems.— a. The cipher lettem of a crypto^an^ 
may serve as keylettcrs, thus automatically furnisliing a key. up- 
pose, for example, that two correspondents agree to use the 
TRUE as an initial key, and suppose the message to bo encip ere 
(with the obsolete U. S. Army cijiher disk) is as follows: 

HEAVY INTERDICTION FIRE FALLING AT . • • • 

The first four letters are enciphered as shown: 

Key text: TRUE 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT • 
Cryptogram: MNUJ 

The cipher letters MNUJ now form the keyletters for enciph^ng 
the next four plain-text letters, YINT, yielding OFHQ- 
then form the keyletters for enciphering the next four letters, a 
on, yielding the following: 

Key text: TRUEM NUJOF HQKOE IIVWU VQODR LOSGD • 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT • 

Cryptogram: MNUJO FHQKO EIIVW UVQOD RLOSG DBMGK • • 

6. Instead of using the cipher letter’s in sots, as shown, 
cipher letter given by the use of the keyword may become t"® " 
letter for enciphering the plain-text letter; the cipher ® ^ 

latter then becomes the keyletter for enciphering the follo^^o ® ’ 

and so on to the end of the message. Thus: 

Key text: TRUEJ LDQXT CZRPW OANIA JFAAP EWJDA • • • 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT • • • 

Cryptogram: MNUJL DQXTC ZRPWO ANIAJ FAAPE WJDAH • • • 

c. It is obvious that an initial keyword is not necessary; a single 

prearranged letter will do. 

d. The plain text itself may serve as a key, after an initial group or 
an initial letter. This is shown in the following example, wherein 
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the text of the message itself, after the ])rearranged mitial keyword 
TRUE, forms the key text: 

Key text: TRUEH EAVYI NTERD ICTIO NFIRE FALLI . . . 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT . . . 

Cryptogram; MNUJJ WNCUR KLCYV UPOAX JAIGT XNFLP . . . 


6. Although reversed standard alphabets have been used in all the 
foregoing examples, it is obvious that various types of alphabets may 
be employed, as prearranged. 

/. The following method, though it may at fii’st appear to be quite 
(liflerent, is in reality identical with those just described. A mixed 
sequence is prepared and its elements numbered in sequence. Let 
the mixed sequence be derived from the keyword PEliMUTABLY: 

657598124 10 
PERMUTABLY 
CDFGHIJKNO 
Q S V W X Z 

AJBKEDSLN MGWPCQ RFVTIZUHXYO 
1 2 3 4 5 6 7 8 9 10 11 12 13 1415 1617 1819 20 21 22 23 24 25 26 


Let the message be the same as before, and let the lu*st letter bo its 
own cipher equivalent. Each cipher letter from that point on is 
produced in turn by finding the sum of the numerical equivalents of 
the preceding cipher letter and the plain-text letter to be enci])hered. 

ben tliis total exceeds 26, the latter amount is deducted and the 
letter equivalent of the remainder is taken for the cipher letter. 1 hus. 


Eeytext: q 23 2 3 21 20 14 23 16 21 11 lY H 25 18 12 12 

Plain text: HEAVYINTERDICTION 

Numericalvalue: 23 5 1 18 25 20 9 19 5 16 6 20 14 19 20 26 9 
Keyed value: 28 3 21 46 40 23 42 21 57 17 57 25 44 38 38 21 


(less 26 or 52 if 
necessary): 
Cipher text: 

Key text: 

Plain text: 

Numericalvalue: 
Keyed value: 


23 2 
H J 
21 12 
F I 


21 20 14 23 16 21 11 17 H 25 18 12 


22 
E 

17 20 16 5 
38 


1 

F 

17 


18 19 
A L 


R 

1 

L 


Z 

9 

I 


1 8 8 20 


F G Y 
12 23 24 
A T 
1 19 


V W W Z 


G 

11 


iiU lb O X7 X o O ' -- 

32 22 27 18 19 27 9 29 12 25 24 45 


(less 26 or 62 if ^ 

necessary); 12 6 22 1 18 19 1 9 3 12 23 24 17 

Cipher text: VJDUAVTANBWHXF 


9- In the foregoing example the successive cipher letters form the 
successive keyletters; but, as noted in subparagraph d, the successive 
plain-text letters may serve as the successive keyletters. 

h. The same results can be obtained by the use of s i mg stiips 
bearing the mixed alphabet. Study the following diagram showing 
the successive positions of the movable strip and compaie the lesults 
with those obtained in/ above. 
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Numbers: 

Key: 

Plain text: 
Cipher: 


J 12 10 5 

E XTIXTIXTIXTI TINTINTINT INGIN 
C OLLECTALLSTR AGGLERSSTO PSEND 
C JIXTRPXIXFAR TCHIEWBQUF TVCVK 


Numbers: 

Key: 

Plain text: 
Cipher: 


7 3 11 

NGUNGUN GUI UISUISU 
THEMFOR WAR DATONCE 
UZQBBGW KUR RIZGVQQ 


Cryptogram: CJIXT RPXIX FARTC HIEWB QUFTV 

CVKUZ QBBGW KURRI ZGVQQ 


e. Another sim[)le method of ])rcarranging the interruption of a 
keyword or of plain text is to employ the sequence of numbers given 
by reducing an incommensurate fraction to dechnals. For example, 
tho fraction yields the sequence 142857142857 . . . This fraction 
may bo represented by the indicator letter H given as tho initial letter 
of tho cryptogram. 

45. Mechanical cryptographs in which periodicity is 
avoided.—There are certain cryptographs which operate in such a 
manner that periodicity is avoided or suppressed. Some of them will 
be discussed hi Section XII. Among them one of tho most interesting 
is that mvented by Sir Charles Wheatstone in 1867. As a rule, how¬ 
ever, mechanical cryptographs, by their very nature, can hardly avoid 
being cyclic in operation, thus causing periodicity to be exliibited m 
tlie cryptograms. 


<J. REPETITIVE AND COMRINED SYSTEMS 


Section X 


REPETITIVE SYS'PEMS 

Supereiicipherment__ 

Uepetitivc transposition systems.. 

Repetitive monoalpliabetic substitution systems_ 

Repetitive poly alphabetic substitution systems.. 


Pamgroph 

46 

47 

48 

49 


46. Superencipherment.—a. When, for purposes of augmenting 
tho degree of cryptographic security, the plain text of a message 
undergoes a first or prhnary encipherment and tho resulting cipher 
text then undergoes a second or secondaiy encipherment, tho system 
as a whole is often referred to as one involving superencipherment. If 
the two or more processes are well selected, the objective is actually 
reached, and the resulting cryptograms present a relatively great 
tlegreo of cryptographic security; but sometimes this is not accom¬ 
plished and the augmented security is of a purely illusory character. 
The final ciyptographic security may, in fact, be no greater in degree 
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than if a single cncipliermcnt had been effected, and in iinnsnal cases 
it may even be less than before. 

b. It is impossible to describe all the combinations that might be 
employed; only a very few typical cases can here be treated, and these 
will be selected with a view to illustrating general [)rinciples. It is 
possible to pass a message thi'ough 2, 3 , . . . successive processes of 
substitution; or tln’ough 2, 3, . . . successive processes of transposition ; 
or substitution may be followed by transposition or vice versa. An 
example of each typo will be given. 

c. It will be convenient to adopt the syml)ol C to represent the 
cipher text produced by any unspecified process of encipherment. 

I he symbols Ci, C 2 , C 3 , . . . , will then represent the successive texts 
produced by successive processes in superencipherment. The sub¬ 
script letter s or t may be prefixed to the C to indicate that a given 
l)roccss is one of substitution or of transposition. Thus, the steps in a 
system where a first substitution is followed by a second substitution 
can be represented symbolically by sC\—^sC 2 - In a similar manner, 
tCi->tC 2 represents double transposition. The symbol ,s*Ci— 
means that the text from a first process of substitution undergoes 
transposition as a second process. 

47. Repetitive transposition systems.—These have been dealt 
with in Sections III and IV and need no further discussion at this 
point. It was there shown that pi’operly selected transposition 
methods, when repetitive in character, can ])roducc cryptograms of 
very great security. 

48. Repetitive monoalpliabetic substitution systems. Sup- 
pose a message undergoes a primaiy encipherment by means of a 
single-mixed, nonreciprocal alphabet, and the primary cipher text 
undergoes a secondary encipherment by means of the same or a 
difevent mixed alphabet. The resulting cryptogram is still mono- 
alphabetic in character, and presents very little, if any, aUt^mci 

in the degree of security (depending upon the type of alphaDet em¬ 
ployed). Here an entirely illusory increase in secuiity IS invo ^ 

mi ineffectual complexity is introduced; the process may n _ 

repeated indefinitely witliout producing the desired 

because the fundamental nature of monoalpliabetic j 

not been taken into consideration in the • • oiiaractcr 

ment;.C.-.C 2 -.sC 3 . . still remains monoalphabet^ 

49 . Repetitive polyalphabetic principle, 

the primary encipherment is by means of t P is similar 

with standard alphabets, and of similar length, the 

in character, with simdar alphabets, ana j Thus, if the 

filial cry])togram presents no increase in Method) 

key BODE is used in the primary encipherment fVigene 
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• herinent, the final 

o„a th*. key Mill ie .,«ed in tke ”rbcm “ ‘ 

result is the same as though the key G 

encipherment. . of the .njary 

b. If mixed alphabets are used, and of . 

secondary cnciplicrinent belong to 11 o 

alphabets resulting from the sliding of two P ^o those J, 

each other, the results are similar - ‘;^;f;g:trat wo^ 
under a above. They are identical with thos _ .^priatc seconda y 

by an equivalent single encipherment y t length 

c. If the key for the secondary encipherment is^of 

from that for the primary enciphenncnt, ■ ^.^gyitant cryP^^^ 
somewhat different, in that the period of lengths- 

becomes the least common multiple of tie j,cipl‘ 0 i’i ”®”^19 

example, if the length of the key for the primal. v key of 

that for the secondary 6, the result is the same ” q'his can e 

elements had been emjiloyed in a single and • 

demonstrated as follows, using the keys 4-1 

. ^ o 4 1 ^ * 


41234123 

52014352 


4 12 3 
0 14 3 


938 4 8475 10 200 


41234123 4123 
5 2 0 1 4 3 5 2 0 1 


938 4 8475 10 2 0 0 


icd 


hub! 

d. The degree of cryptographic security is, withoiif that is, 

.. educt, tlio 


by such a method. If the key lengths arc propci y ^ pfortucn) 
if they present no common multiple less than t loi^ ^xaii^P^^^ 
method may give cryptograms of great security. 1 „ive a cryptog*’*^" 
keys that are 17 and 10 characters in length would g jpkered onco 
that is equivalent in period to that of a cryptogram prin- 

by a key 17 X 10, or 272 elements in length. The fmn cipb^^ 

ciple of an excellent, though complicated, printing to egn 
system is this very principle. 


Section XI 


COMBINED SYSTEMS 

59 


Combined monoalphabetic and polyalphabetic substitution systems- 

Combined substitution-transposition in general.-.'. 

Monoalphabetic and polyalphabetic substitution combined with transp 

tion__ 

Polyliteral substitution combined with transposition__' 

Fractionating systems__' 

Comparison of foregoing fractionating system with certain digrai)bic 

systems_ 

Fractionating systems as forms of combined substitution and transposition--- 
Fractionation and recombination within regular or variable groupings of 

fractional elements_ 

Fractionation combined with columnar transposition- 


61 

52 

53 

54 

55 

56 


57 

58 
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60. Combined monoalphabetic and polyalphabetic substitu¬ 
tion systems.— a. If a message undergoes a primary encipherment 
by the repeating-key method, using standard alphabets, and the 
primary cipher text then undergoes a secondary cnciplieiment by 
means of a single-mixed alphabet, the degree of ciyptographic secu- 
lity is increased to the same extent that it would be if the original 
message had undergone the same primary encipherment with second¬ 
ly alphabets resulting from the sliding of a mixed primary scHpnmce 

against the normal sequence. This increase in security is not very 
Si’oat. 

h 

• me same is true if the primary encipherment is monoalphabetic 
encipherment is polyalphabetic by the method 

c. In general, this also applies to other types of polyalphabetic and 
monoalphabetic comliiuations. The increase in security is not very 
Sreat, and is, indeed, much less than the uninitiated suspect. 

• Combined substitution-transposition in general.—Com- 
Hnations of substitution and transposition methods can take many 
erent forms, and only a few examples can be illustrated herein. It 
js possible of course, to apidy substitution first, then transposition, or 
^tansposition first, then substitution. The most commonly cncount- 
^y^bems, however, are of the former type, that is, sCi-^tCy 
W can be stated that as a rule practicable systems in 

. ^^^bh processes are combined use methods that are relatively 

sim])lc in themselves, but are so selected as to produce cryptograms 
0 great security as a result of the combination. To give a very rough 
analogy, in certain combinations the effect is mnch more tlnm 
^Tuvalent to the simple addition of complexities of the ordci an , 
it is more of the order XY, or oven X^Y\ 

• Monoalphabetic and polyalphabetic siihstitu ion 
wied with transposition.— a- A message may 
•"onoalphabetie substitution or complex polyalphabetm snbstitutu n 
the resulting text passed through a simple transpositioi . _ 

viously, either standard or mixed alphabets may )o ^ 

«!'Witution phase and for the transposition phase a y mo of the 
varieties of geometric-design methods may ^ 

As an example, note the ^ 

in^ssage ALL ACtIoN AT LANDING T LACH H AS CLASLU. 

1st step; (monoalphabetic, by mixed alphabet). 

Wain; ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher: TDRAMOBNILPEZYXWVUSQKJHGF 

Messao-c* ALL AC TIONA TLAND INGBE ACHHA SCEAS ED 

Cipher” TOETR QIJHT QETYA lYBDM TRUST SRMTS MA 
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,top' prearranged between correspondents): 

^ _v- tFor the inscription; a rectangle of eight columns.) 

TEETRQI^ ^ 

yTQETyAl tran.scription; counterclockwise route beginnitij 

YBDMTR^ lower right hand corner.) 

r -ani: ANIXI QRTEE TiTTS RMTSM NAYTE QTBDM TR 

Cry I ^ . subterfuge often adopted between correspondents is to 

f- aiibstitution te.xt backwards to form the final crypt^^''^"' 
write 1 10 reversed writing). , . 

(a cu^ u extremely simple and yet effoctivo transpo.sition ^ 
f' !4a oresenco is not susi)ected) .sometimes employed as a e 
(when I g||,,g(,jt„tion is that in which the text of a 

lijiunaiy Jialves; the second being placed under the 

first clivKic^ 

in rail-fence writing. Hms. 

pOEDOOTFMAKTO 
RCETPROEBRAIN ^ 

Then encipherment by .simple monoalphabetic methods 
ctfccted and the ciplicr text taken from the two separate 
Thus if a standard aljihabet one letter in advance were us 
text would bo as follows: 

QPFEPPUGNBLUP 

SDFUQSPFCSBJO 

Cryptogram: QPFEP PUGNB LUPSD FUQSP FCSBJ 0 
e A simple variation of the foregoing method which is 

effective with true digraphic methods of substitution is to wriu 

under P'p and then encipi.er the sets of ju.vtaposed f 

graplucally, then letters. Thus, 1®' 


^rUlJllILyllLlY f ^ ^ ^ n ■ICUiOrSt 

message be WILL RETURN AT ONCE; it would bo written 
as follows:* 


WLRTRAOC 

ILEUNTNE 


Tlien the following pairs would bo onciphoj-u^i. WT ITTw 

IT., etc. The woiii, ,„.P. , 


by means of the Playftur Square sliown in Eio.,,,.„ oq exainr 
yields tlio following ciyptogram: •= 


Plain text: WL RT RA OC IL EU NT NE 

Cipher: VO IR TN LT CQ HN AR Rp 

Cryptogram; VOIRT NLTCQ HNARR p 

' In prci>aring the text for encipherment, tlie clerk ,« , j tJi»* 

a I’layfair Square is to be used no doublets can K nust bear in miuo 

VVE WILL LEAVE . . . would be arranged tluis- ®**®'Phored. The mrS 

WXILXEV 

KWLXLAE 
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/. Naturally the transposition process may involve groups of let¬ 
ters; a simple type of disarrangement is to reverse the order of the 
letters in 5-letter groups, or witliin 5-letter groups a transposition 
such as 3-2-1-4-5 or 2-1-5-3-4 (any of 120 different arrangements) 
19 possible. 


9‘ Columnar transposition methods lend themselves especially well 
to combination with substitution methods. An excellent example 
wi be considered under the next section. 

3. Polyliteral substitution combined, with transposition.— 
1 paiagraph 296 the essential nature of polyliteral substitution as 
contrasted with monoliteral substitution was discussed. Polyliteral 
ine lods make use of ])oly])artito al])habots in which the cipher 
CQiuvalents ai’o composed of two or more parts. This being the case 
IS a natural extension of cryptographic processes to separate these 
I'll! s or to distribute them throughout the cipher text so that the 
coinponcnts or, so to speak, fractional parts of the cipher equiva- 
s are thoroughly disarranged and distributed evenly or irregularly 

throughout the text. 

• I'ractionating systems. — a. A simple example will first bo 
lown. Let the following bipartite cipher alphabet bo drawn iip by 
l^ssi^nmg numerical equivalents from 01 to 26 in mixed sequence to 
'c etters of the normal sequence. Tims; 


abcdefghijklm 
02 11 06 12 13 05 10 14 09 15 16 17 01 


NOPQRSTUVWXYZ 

03 18 19 20 08 21 07 04 22 23 24 25 26 
Each letter is represented by a combination of two digits; in prepar- 
the message for cryptographing, the two digits comprising the 
cipher equivalent of a letter are written one below the other, thus. 

Elam text: ONE PLANE REPORTED LOST 

E^ipherK'^ ^01 11001 01110011 1120 

^o: 833 97233 83988732 7817 
% I’ecombining the single digits in pairs, reading from horizontal 
lines, and witing down the paks in unchanged numerical form, one 
obtains the following: 

10 11 10 01 01 11 00 11 11 20 
83 39 72 33 83 98 87 32 78 17 

b. The foregoing cipher text can be transmitted in 5-figure groups, 
or it can bo reconverted into letters by one means or another, but 
some difficulties are encountered in the latter case because every one 
of 100 different pairs of digits has to bo provided for, thus necessitat- 
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inn a 2-lett«ir substitution, wiiicb would make the cipher text twice 
as long as the pbun text. 

c. In the methods to follow iirescntly, these difTiculties are avoided 
hy u simple modilication. This modification consists in the employ¬ 
ment of true pnhjfid cipher alphabets, that is, iiolypartite alphabets in 
which the plain component is the normal sequence and the cipliex 
comi>onent consists of a sequence of equivalents composed of aU. tlie 
permutations of 2, 3, 4, . . . sjnnhols taken in definite groups. For 
example, a bifid alphabet ‘ conqiosed of permutations of five digits 
taken two at a time can he constructed, yielding a set of 25 equiva¬ 
lents for a 2‘)-letler alphabet (I and .1 being usually considered as one 
letter). -1 trifid alphabet of 27 equivalents can ho constructed from 
all the pennutations of the digits 1, 2, 3, taken three at a time; an 
extra character must, however, he added to represent the 27th ele¬ 
ment of the ulphaln't. It is convenient to represent the parts of a 
hitid I'qiiivalent hy the sxTuhols d\ and the parts of a trifid 
eipiivalent, hy the symbols 0\, and 6^^. 

d. I’«>lyhd ci])her alphabets may he systematically-mLxed alphal>ets 
hn.s«*«l upon keywords and kexqihrases. For e.xample, note how the 
following hifiil alphabet is derived from the keyphrase XYIXD- 
I'llO.VK’ BKI)L.\M: 

XYLOPHNICBEDA 
11 12 13 14 15 21 22 23 24 25 31 32 33 

MFGKQRSTUVWZ 
34 35 41 42 43 44 45 51 52 53 54 55 

'fhe same principle may lie applied to trifid alphabets, employing the 
permutations t»f the three digits 1, 2, and 3, taken in groups of three. 

f. Note the following bifid alphabet and the example of its use in 
enciphering a message; 

ABC DEFGHI-JKLM 
12 31 21 32 33 15 25 34 24 35 41 11 

NOPQRSTUVWXYZ 
13 42 43 44 23 45 22 14 51 52 53 54 55 

Message; ONE PLANE REPORTED LOST 

\e\: 413 44113 23442233 4442 

('ipU*T . 233 31233 33323232 1252 

« Sacti an alt>hnt>*'l ulioultl tie clearty ititTorentiated from a biliteral atpkah^i. 
In the laU«T, two and only two vlomentsi arc employed, in groups of fives, yield¬ 
ing •.*:> or 32 iwrmntatimvi. The Uditorol Cipher of Sir Trancis Bacon and the 
Hau'l'*' Ml>halH't of nunlern printing telegraph systems arc based upon alphabets 
that an't > pieal exampU's of hiliteral alphaliets. The designation diffrapkic alpha- 
hff will Iw* applietl to otic in which the cipher equivalents arc composed of any 
umlwr »f symboU, a. taken simply in groups of two, these symb^ not being 
|K'rmote»l in aystematic fashion to produce a complete set of 2“ equivalents. 
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The bifid elements, O'c and 0*., arc now recombined honzontally m 
pairs and the pairs are reconverted into letter oquivalonls of the basic 
alphabet which, for the sake of convenience, is here arrange<l in the 
form of a deciphering alphabet: 

11 12 13 14 15 21 22 23 24 25 31 32 33 
MANUFCTRIGBDE 

34 35 41 42 43 44 45 51 52 53 54 55 
HKLOPQSVWXYZ 

Cryptogram: LHLNR QTEQO REAEE DDDAW 

y. It will be noted that there are four basic steps involved in tho 
foregoing encipherment: (1) A process of decomposition, substitutive 
in character, in which each Op is rejilaced by a biimrtitc 0,, composed of 
two parts, O'c and 0\, according to a bifid alphabet; (2) a process of 
separation, transpositivo in character, in which each e\ is Bcjiuruted 
from the with which it was oi%inally associated; (3) a process of 
recombination, also transpositivo in cliaracter, in which each 6\ is 
combined with a 0\ with which it was not originally associated; and 
finally (4) a process of recomposition, substitutive in character, in 
wliich each new combination is given a letter value according to 
a bifnl alphabet. In the foregoing example (c almve), tho alphalwi for 
the recomposition was tho same as that for the (kn-omposition; ibis, 
of course, is not an inherent neeessity of the system; the decomposition 
and recomposition alphabets may be entirely difTeront. This is 
shotvm in the exani])le in i)aragraph 5.'id. 

55 . Comparison of foregoing fractionating system with 
certain digraphic systems, a. The method descrihed under 
paragraph 54e can be identified with some of the digraphic substitu¬ 
tion systems discussed in Section VII. 

ft. Take the message of paragraph 54f and let a slight modification 
in the method of recombining d\ and 6=, be made. Specifically, kt 
the first halves and tho second halves of the bifid equivalents of the 
plain-text letters ho combined in the following manner, using the 
bifid alphabet of i)aragru|)h 54c: 

Message: ONE PLANE REPORTED LOST 

ON EP LA NE RE PO RT ED LO ST 
41=L 34=H 41=L 13=N 23=R 44=Q 22=T 33=E 44=Q 42=0 
23=R 33=E 12=A 33=E 33=E 32=D 32=D 32=D 12=A 52=VJ 

Qryptograin: LRHEL ANERE QDTDE DQAOW 

If the cryptogram given in ])aragruph 54e were split in tho mi<ldlo into 
two sections, and tho letters taken ullcrnutcly, the result would be 
identical witli that obtained in this subparagraph. The identification 
referred to in a above is now to bo demonstrated in c below. 
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I I in 

c. Note tlie 2-alplial)et chockorboard shown n ^ cryptogram 
the same message is now enciphoml by it^^ be obtained, 

identical with that obtained in paragraph 6ob " * 


Thus: 


M 

A 

N 

U 

F 

C 

T 

R 

I 

G 

B 

D 

E 

H 

K 

L 

0 

P 

Q 

S 

V 

W 

X 

Y 

Z 

M 

C 

B 

L 

V 

A 

T 

D 

0 

W 

N 

R 

E 

P 

X 

U 

I 

H 

Q 

Y 

F 

G 

K 

s 

Z 


Message: 

ONE PLANE reported 

Substitution of pairs: 

0Np=LRc.; EP,.=HE,; LAp-=LA. 
REp=REo; 


. NEp= 


:NEo; 


Cryptogram: 


LRHEL ANERE 


was 


hi paragraph 54e, the same 


riOUliE 44. 

used fort'r PJ^ragrapii 54e, tlie same 

vcrtinfr fi,!f the decomposition. 7iv 

Snfl fi r? into letters bJ 

drawn up ft ""P.P®"® liifid 

>is recomposition is at hand (see ])«'■- 


11=A 

12=U 

13=t 

14=0 

15=:M 

The oncipherij^ 


21=B 

22=1 

23=L 

24=E 

25=S 


31=C 

32=D 

33=F 

34=G 

35=H 


41=K 

42=H 

43=P 

44=Q 

45=R 


' “t'riuont of the m 40-n 

Message: one pi amp n as follows; 

WST. 


51 =“^ 

52='^ 

53 =^ 

54='5^ 

55=-Z 


dtcompomion 

B=31 
C=2l 
D=32 
E=33 
F=15 
0=25 
H=34 
I-J=24 
K=35 
L=41 
M=ll 


N=13 

0=42 

P=43 

Q=44 

R=23 

S=45 

T=22 

U=14 

V=51 

W=52 

X=53 

Y=54 

z;=55 


aip/iofcft for recotnP^^*^^^ 

ll=A 


12=U 

13=T 

l4=o 

21=b 

1^1-0 

23=e 

24==e 

25=s 

31=0 

32=d 

33=p 


34=G 

35==H 

41=:K 

42^N 

43==P 

44=Q 

45=B 

51=V 

52=W 

53=X 

54=Y 

55=Z 
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Encipherment: 


ON EP LA NE RE PO RT ED LO ST 

41=K 34=G 41=K 13=T 23=L 44=Q 22=1 33=F 44=Q 42=N 

23=L 33=F 12=U 33=F 33=F 32=D 32=D 32=D 12=U 52=W 

•^'TPtogram: KLGFK UTFLF QDIDF DQUNW 


Now encipher the same plain-text luessaf'e by means of the 

HP labet checkerboard shown in Figuro 45. The results are as 
follows: 


^®ssago: ONE PLANE REPORTED LOST. 


M 

A 

N 

U F 

A 

U 

T 

0 

M 

C 

T 

R 

I G 

B 

I 

L 

E 

S 

B 

D 

E 

H K 

C 

D 

F 

G 

H 

L 

0 

P 

0 S 

K 

N 

P 

Q 

R 

V 

W 

X 

Y Z 

V 

W 

X 

Y 

Z 

A 

B 

C 

K V 

M 

C 

B 

L 

V 

U 

I 

D 

N W 

A 

T 

D 

0 

W 

T 

L 

F 

P X 

N 

R 

E 

P 

X 

0 

E 

G 

Q Y 

1 ^ 

I 

H 

Q 

Y 

M 

S 

H 

R Z 

F 

G 

K 

S 

Z 


Fiqukk 45. 

S^^text: ON EP LA NE RE PO RT ED LO ST 
'P“er pau^. qf KU TF LF QD ID FD QU NW 

^‘■yptogram; KLGFK UTFLF QDIDF DQUNW 
Tl 

results are identical with those obtained under d above. 

II the successive letters of the cryptogram of h above are en- 
^Phered monoalphabctically by means of the following alphabet, tlie 
again coincide with those obtained under d and e above. 


Alphabet 

Ci: ABCDEFGHI-JKLMNOPQRSTUVWXYZ 

UCBDFMSG E HKATNPQLRIOVWXYZ 

J^irst cryptogram- LRHEL ANERE QDTDE DQAOW 
cryptogram; KLGFK UTFLF QDIDF DQUNW 
^0. Fractionating systems as forms of combined substitu¬ 
tion and transposition— In studying the various types of checker- 
i^oard substitution discAissod in Section VllI, it was not apparent, and 
Oo hint was given, that tlicso systems combine both substitution and 
transijosition methods into a single method. But the analysis pre¬ 
sented in paragraph 55 shows clearly that there is a lund of trans¬ 
position involved in checkerboard methods of cryptographing, 

.^.8U4ori" 44-0 
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57. Fractionation and recombination within regular oi* 
variable groupings of fractional elements.—a. Tliis method is 
extension or modification of that illustrated in paragraph 54e. Let 
the text bo written out in groups of 3, 4, 5, . . . letters, as prearrang^eci 
between the correspondents. Suppose groupings of five letters ai-o 
agreed upon; a bifid alphabet (tliat in par. 54^) is used for substitxx*. 
tion; thus: 

Message: ONEPL ANERE PORTE DLOST 
41344 11323 44223 34442 
23331 23333 32323 21252 

Then, let the recombinations be effected within the groups hot*i^ 
zontally. Thus, for the first group the recombinations are 41, 3^ 
42, 33, and 31. The entire message is as follows: ^ 

41.34.4 11.32.3 44.22.3 34.44.2 

2.33.31 2.33.33 3.23.23 2.12.52 

Recomposition (using the same bifid alphabet as was used for 
decomposition) yields the cryptogram: 

LHOEB MDDEE QTERR HQTAW 

h. As indicated, other grou])ings may be employed. Furthermox'^ 
a diflerent bifid alphabet for the recomposition may be used than 
employed for the original substitution or decomposition. It is 
clear that sequences of variable-length groupings may also be 
ployed, as determined by a subsidiary key. 

c. Trifid alphabets also lend themselves to these methods. 
the following example: 


Alphabet for decomposition Alphabet for recomposition 


A=222 

J= 

312 S=131 


111=1 

211=U 

311 = v 

B=322 

K= 

:112 T=122 


112=K 

212=N 

312=^ j 

C=121 

L= 

231 U=211 


■ 113=W 

213=H 


D=133 

M= 

323 V=311 


121 = C 

221 =X 

321=^5; 

E=321 

N= 

:212 W=113 


122=T 

222=A 

322==:^ 

F=123 

0= 

333 X=221 


123=F 

223=Y 

323== ^ 

G=332 

P= 

233 Y=223 


131=S 

231=L 

331= Q 

H=213 

Q= 

331 Z=132 


132=ZA 

232=R 

332= Q 

1=111 

R= 

232 ?=313 


133=D 

233=P 

333=0 

Message: 

HAS AIRPLANE 

RETURNED YET? 

H A S A 

I 

R P L A N 

E R 

E T U 

R N E D Y 

E •a? 

2 2 1.2 

1 

2 2 2.2 2 

3 2 

3.1 2 

2 2 3.1 2 

3 ^ ' 

1.2 3 2, 

,1 

3.3 3 2.1 

2.3 

2 2.1 

3.1 2 3.2 

2 ^ ^ 

3 2.1 2 

1 

2 3.1 2 2 

1 2. 

,12 1 

22.133 
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Cipher text:* XURZAC AYGFT MTBKC YFFAD ZBXF 
Final cryptogram: XURZA CAYGF TMTBK CYFFA DZBXF 

d. Bifid and trifid alphabets may be combined within a single sys¬ 
tem with appropriate groupings, but such combinations may be con¬ 
sidered as rather impracticable for military usage. 

58. Fractionation combined with columnar transposi¬ 
tion.— a. An excellent system of combined substitution-transpo¬ 
sition that has stood the test of practical, war-time usage is that now 
to be described. Let a 36-character bipartite alphabet square be 
drawn up, and a message enciphered, as foUows: 

MONTHS 


(Key for internal alphabet: HAIL COLUM- 
BIA HAPPY LAND. Digits are inserted 
immediately after each letter from A to J, 
A being followed by 1, B, 2, etc.) 


w 

H 8 A 1 I 9 

I 

L C 3 0 U M 

N 

B 2 P Y N D 

T 

4 E 5 F 6 G 

E 

7 J 0 K Q R 

R 

S T V W X Z 


Alessage: 

ADVANCE PROGFIESSING SATISFACTORILY OVER 400 PRIS¬ 
ONERS AND 5-75 MM GUNS CAPTURED. SECOND OBJECTIVE 
REACHED AT 5:15 P. M. 

Substitution: 

ADVANCEPROGRESs 

WN NS RN WN NH 10 TO NN ES IT TS ES TO RM Rn 
INGSATISFACTOR I 
WH NH TS RM WN RO WH RM TT WN 10 RO IT ES IfH 
LYOVER400PRISON 

IM NT IT RN TO ES TM EN EN NN EIS WH RM IT Mr 

ERSAND575MMGUNs 

TO ES RM WN NH NS TN EM TN IS IS TS IH NH Rj, 
CAPTUREDSEC ONDq 
10 WN NN RO IH ES TO NS RM TO 10 IT NH NS If 
BJECTIVEREACHEd 
NM EO TO 10 RO WH RN TO ES TO Wli 10 WM TO Ns 
A T 5 1 5 P M 
WN RO TN WT TN NN IS 


* The reason for the regrouping shown in the final cryptogram requires a co 
eideration of the fact that a trifid alphabet involves the use of 27 

Since our alphabet contains but 26 letters, either an extra symbol would have L 

be used (which is impractical) or some subterfuge must be adopted to circunjve*^ 
the difficulty. This has been done in this case by using ZA and ZB to repf^^**^ 
two of the permutations in the recomposition alphalx;t. In decryptograpi^^ 
when the clerk encounters the letter Z in the text, it must be followed cith^ i*' 
A or by B; according to the alphabet here used, ZA represents permutation 
and ZB represents permutation 313. In order not to introduce a break in 
regulation 5-letter groupings of cipher text, the final cryptogram is reev... ***’ 
strictly into fives. **l*e(i 
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The Cl text is now inscribed in a rectangle of predetermined dimen¬ 
sions. Transposition rectangle; (Columnar, based on key HAIL 
COLUMBIA HAPPY LAND.) 

HAIL COLUM BI AHAPPYbAH D 

8—1-10-12—6-17-13-20-15—5-11—2—9—3-18-19-21-14— 


WNNSRNWNNHIOTONN 

SESTORMRMWHNHTSR 

WHRMTTWNIOROITES 

TITRNTOESTMENENN 

rmitnhtoesrmwnnh 

MTNISISTSIHNHRMI 

ROIHESTONSRMTOIO 

SITNMEOTOIOROWHR 

TOWNIOWMTONSWNRO 

N N N I S 


Cryptogram: 

NEHIM TOION ONOEM NMRSO TTENR OWNIN 
ISTNN OWHWO TSISI OROTN NSEMI STONH 
ENNST WSWTR MRSTN THINW HTOWN SRTIN 
ITWNI HRMRH RONST MRTIH NNIWM WOTST 
OWSWH ESWTT NNMIS ESNOT TRMWN NHETN 
RTTHI SEONS ENNMI HRNRS NHIOR ONRNE 
OTOTM EMWNN OINT 

Fiquke 46. 

b. One of the important advantages of this type of ciphei is tint 
it affords accuracy in transmission since the text is compose . ^ 
limited number of letters. In fact, if the horizontal | 
coordinates of the cipher square arc the same letters, then t le 
tographic text is composed of permutations of but six diffeicn e 
thus aiding very materially in correct reception. Indeed, 
possible to reconstruct completely a message that has been so ^ . 
garbled that only half of it is present. This cipher system 

with considerable success by the Gorman Army in 1917 - 18 , mn 
known to the Allies as the ADFGVX Cipher, because these 
the letters used as horizontal and vertical coordinates of ^ 

square, and consequently the cipher text consisted solely of ^ 
six letters. 

c. The cipher text of the foregoing message is, of course, twice as 
long as the plain text, but it can be reduced to exactly the origma 
plain-text length by combining the distributed or transposed 6 o 
and elements in pairs, referring to the original (or a diflei’ent) 
polypartite square, and recomposing the pairs into letters. Ii^ 
case, the horizontal and vertical coordinates must be identical lU 
order to i)ermit of finding equivalents for all possible pairs. 


E S I T T 

M W N R 0 

W H I M N 

N E S W H 

N S T N E 

0 W N N N 

I T N H N 

T 0 E S 

T N W T T 
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D. CRYPTOGUAPHS AND CIPHER MACHINES 

Section XII 
CllYPTOGRAPHS 

Preliminary remarks. . 

Wheatstone Cipher. .]]. 

Jefferson Cipher.__ ... .-. 

The obsolete U. S. Army cipher device, type .. 

remarks.-The cipher systems described m the 

svstp by no means exhaust the ^,.*ueniiore 

•y* terns, hut It is impossible to describe them aU. Tu ^ 

LsLT" innumerable possibilities for pagraphs 

to folio +1 combination with other methods, n ^ simple 
me^n upon wliich certain of the "lom smp 

60 Wheat ^UtlomoTG than four 

ineW, rr «Pher.-«. The device .s a l'«l“ ,, si, own 

in I'isuro dT^TUeT'iT^^’ “H‘’'f'two independent.*'*® »' 

lettftr^ T XI composed of two i .^Uyj^ise m normal 

alphabetic^ outer circle the letters progress c jjgj.^yecn the Z 

and the A ^Sime of the spaces also 

have diidt a total of 27 characters. „bei-s. In the 

inner circle alphabetic sequence 

and are in -I'® letters are arranged m mix , erasure, or on 

a detacheither on a surface wluch ^gd and replaced 

hy anoth ^ .^^rdboard circle which can be re pigure 47 tins 
inn He derived from the 

1 2 5 4 5 6 

FRANCE 

B D G H I J 
K L M 0 P Q 

S T U V W X 

YZ 

^i^SYRDLTZAGMUNH ^ 

The two hands are pivoted enncentuca 
and minute bands of a clock, ^ow, m only 

makes a complete revolution, whUe the how- 

01 a complete revolution; the action m i j^ove inde- 

ever, is somewhat different. The shor latter affects 

pendently of the long one, although i g j^ggg and the inner one 
the former. Since the outer ® ^ i^ance each complete revolu- 
only 2®, by a simple “"''““I® v„rt bond to mske IKi revolutions, 
lrclX"rrCd tpoint one pl«e in advance of where 
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, I „t tho pi«o<iine «“*" * 

wll th. long ln'n;l « “rlt I' *!'"X 


1. m„U0 a complete revo ^ 

r:n:i;ii’:n-a;, u. . 0 .. 

.et\, proanangod initial P-;‘"’"%|, cirdo »' „„g „.^ 

p,.i.,.U.'.t lotto. wiU 1.0 sought m tl™ 

TvalbT'" ho '"ovod in tho s«.no a-o««"' 



FIOUIIK 47. 


Suppose tlie message to bo enciphered is ^ it i® 


SEND AMh:;“; dir«» 




TlOl* 

i1 


i¥ 

to 

a- 


FORWARD. Tho long hand is moved clockwise 
over S on tho outer scquonco. Tho letter to w ne | 
points is tho cipher equivalent of S and is written ^ ^ vi 

long hand is moved clockwise to a position ovei > . 

which tho short hand points is noted and written e ^ JqU 
double letter occurs in the plain text, as in tho caso 0 > 

M of AMMUNITION, some infrequently used letter, I 

must be substituted for the second occurrence of I - 1 


* 'tial 0 

decipher a message, tho hands are returned to then 1 ^^jge 
ranged positions, and then the long hand is moved eloe ^ 
tho short hand points to the first cipher letter; tho long 
directly over tho plain-text letter. Tho process is contiin 
all the letters have been deciphered. loh®^' 

d. A consideration of tho foregoing details shows that the 


ment of a message depends upon a combination of the 
variables 
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(1) The sequence of lettere in the outer circle. In the case just 
considered, this sequence must be regarded as a known sequence, 
since it consists merely of the normal alphabet plus one character. 

(2) The sequence of letters in the inner circle. 

(3) The initial juxtaposition of the two sequences. 

(4) The exact comjjosition of the text to be enciphered, since t s 
will determine the number of revolutions of the long hand required 
to encipher a given number of letters of the message. 

c. It is obvious that if the outer alphabet is made a mixed alphabet, 
as well as the inner, both being different, the cryptograms will be 
made more secure against cryptanalysis. . 

/• The same results as are obtained by using the device can e 
obtained by using sliding strips of paper, providing the operator wiU 
bear m mind that every time a 0, on the plain component is situated 
to the left of the preceding he must displace the cipher component 
one interval to the left, if the correspondents have agreed upon a 
clockwise movement of the long hand, or to the right, if they have 
agree upon a counterclockwise movement of the long lan . 

61. Jefferson Cipher.-a. Credit for the invention of the c pber 
system and device now to be described belongs to 

inventor, although it was independently invc _ . 

‘“ter (1914) by Captain Parke- H.tt, U- / ;„.int 

Qgni f i ■^‘^tny, Ret.)- Because it was bra !u)iier system is 

based ia ^ tbo principle upon wluc i “L principie: 

leTtlil “ u ^rein called the 

of historical accuracy, hoivever. it « be‘“ 
on principle. p of 20 (or more, if 

desii-Arl^*^ ^nsis of tliis principle is the use o ^ j can readily be 

chanS ‘Alphabets arranged in a J of 20 

tS bo used ill the encipherment o g . 

“'“I; one and the same <lisph>ce“e” digplacenieiits 

S,„ “CO accomplished with 

«1 the alphabets. , ,i„ using a total of 36 

difformt'"?® doltcraeil contoiupl»l»'* “ the one Bazcrios 

™‘,“ll>liabets mounted on '“J m the samo maimer, 

only 90 alphabets mouu^d . 

. ■ The late John M Manly, Ph- the device among Jefferson’s 

12’ ^ 1022. a 41575, .leffer,son’s Papers . 

Papers in the Library of Congress interesting item, see pp.l^ 

Per a photographic reproduction <ff this 1 ^^.^ Bcprmled From The Signal Caps 

"" <^^yvtographV ami tin„, OCSigO, Washington, 1942. 

Bulletin, Signal Security Service Puhuc 
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. „ type M- 94.-^- 

62. The obsolete U. S. Army cipher 25 mixed 

This cryptograpli is based iii)on the Je/rorson in oiH* 

alphabets on small aluminum disks. It was wi^ ^ ^ ^ g g^^p^rjecs 

military service and to a more limited extent in o 
until very recently, when it was superseded by ^pyptograpli 
b. Because the basic principles involved in sue i cryptog" 

extremely important and have a direct bearing upon employ" 

raphy, a detailed description of Ibis device and its nio 
ment will be presented in the next section. 
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Section XIII 

THE OBSOLETE U. S. ARMY CIPHER DEVICE, TYPE M-94 

Paragraph 

Issue to students_______ 

General descripti on_____ 

Necessity for key and providing for changes therein- - 

Detailed instructions for setting the device to a predetermined key. 66 

Cryptographing a message. ___ 

Cryptograpliing abbreviations, punctuation signs, and numbers-- 68 

Decryptographing a message. ... . 

63. Issue to Students.—When a student who has been regulaily 
einolled in the Anny Extension sulicourse to which tliis text applies 
reaches this jioint in his studies, one of these devices will be tempo- 
larily issued to him for use in connection with the lesson assignment 
dealing with it. The following description of the device and instruc¬ 
tions for its use M'ill bo clear when be has the device in band. They 
comcido with the description and instructions employed in training 
literature applicable when the, device was in effect. 

64. General description.—a. The device is made of aluminum 

alloy and consists of the following parts; . . 

(1) A central shaft, the left end of wliich terminates with a project- 

ing shoulder, the right end of which is threaded; . . , 

(2) A set of 25 alphabet disks, on the rim of each of which tJiere is 
stamped a different, completely disarranged alphabet; 

(3 A guide-rule disk, consisting of a blank or unlettered-disk 

otV ^ Suide rule; r,nf> surface of 

( ) A retainmg 'plate^ consisting of a thin • .g. 

whrt arc stan.pcd tl,c name and type nnn.bcr of tl.o device, 

,, t,.e eenfer cifaHe *er j; 

‘he central aUaft, upon wldcl. the disk can ^ „iti, . 

ac.ward. The left face of each alphabet * , and carries at 

re 0 ot 26 equidistant slots; tlio right face is aniocting lug. The 
one point on i,ajido rim of tliis “P “ “"“J|,Liiksnre assemblod 
guide-rulo disk also curries such a lug. quo of the slots on 

ipon the shaft, the lug on each disk ®"^^^j j „nbeheldinengage- 

adjacent disk on the right and thus the d^^ down the knurled 

ment in any desired relative positions y • ^ between the 

tl'wnb nut against the retaining phRe, which 

disk and the nut. . . ^ro removed and the 

jphabet disks are taken off .«'» i an indeutifying 

phabet IS stamped on its ,1 ^ 

symbol consisting of a number i* i 9^; inclusive the 

letter that is below it. The numbers run from 1 to 25, inclusive, the 
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, 1 , are employ®*^ 
letters from B to Z, inclusive. These f ® j-gUg are “2' 
designate the sequence in which the a p le ^ pjQgrapl'i^'S 
bled upon the shaft in cryptographing or fy be used for 

as described in paragraph 66. Either symbol^ „ainencal 
purpose (as ])rcaiTanged) but for the piese 
identifying symbols will be so used. • 

66. Necessity for key and providins '<»• *“Spb«b«t 

Messages cryptographed by the same scquenc (.0icienli^ 

remain secure against solution by a It is 


inipossiD^'^ 

v>xiici/ix j. 1.11 u ci-^cxxi xi:? u vjv'A - " »/ , 4il>TP YiV\P.r 

‘Typtanalytic section for only a relatively s loi ^ 

to state exactly how long, because solution dep the !»*““ u 

of variable factors; a conservative estimate won 1 _ j-eftso 
at six hours, the maximum at two or three ^ ^ 

is necessary to change the sequence fi’oin time to > 
for determining or indicating the new sequence n^ uso 

in advance and thorouglily understood by fl ^ ^ 
instrument. ^ apmblcd^P^^ 

h. The sequence in which the alphabet disks are ^ 


shaft constitutes the key in this cipher system 


011CI.X u xjuiiauiuuLiCS uiio n.c.y m nmcj , -m he and the 

key is to take place, exactly what the new key v . .^viined by 
__X xl._x ‘x •_ x^ _^ 1 ^ 4 . 1 .^ IrXi'ir will be OOl'C 




signM 


til 


■tb0 

•ratioi^ 


moment that it is to supersede the old key will bo 
proper commander and will be communicated m 
instructions. . ^ to ^ 

66. Detailed instructions for setting the 
determined key. — a. The method prescribed herein i 
a keyword or keyjdirase from which the sequence of 
ing the key for assembling the alphabet disks “i„„ fo.- «»?!:>: 
following a simple, standardized procedure. The leas ^ a 

ing such a procedure is that it makes it jiossible to deriv to 

relatively long sequence of numbers (which would bo , an^ 
remember) from a word or phrase (which is easy to iipoi^ 

thus eliminates the necessity of carrying the key in written 
the person. It is this basic ke^^word or keyphraso which is 
cated tliroiighout the command in signal operation iiistructio 
exact method of deriving the numerical key sequence from 
word or keyphrase is given step by step in b below. [jlN®^^ 

’ in 


b. Assume that the key phrase so communicated is 
LAUNDRY. The following are the detailed stejis to bo 
deriving the numerical key sequence: 


followed 


(1) A sot of rows of cross-section squares, 25 squares in each loW; 


is 


prepared. 


(Prepared sheets of )^-inch squares are suitable.) 
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inserl? numbers 1, 2, 3, . . . 25 are 


inserted. Tims 
1 


4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

— 

— 

_ 











































phrase are vmtfon I’r. +i ‘i-' unu xv^j 

numbers TI ^ second row of squares, under the successive 


successive letters of the key 


Thus 


8 

L 

9 

A 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

U 

N 

D 

R 

Y 






























binder the Tin^r extended b; 

_her 25, making a key 


is extended by repetition until there is a letter 


sequence of 25 letters.^ Thus: 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 


21 


22 


23 


24 


25 


(^) Tile 1 ~ 

from left t key sequence are now to bo numbered serially 

letter occ accordance with the relative position that each 

h^’st in th^^^^^r ordinary alphabet. Since the letter A comes 

hlustrativ^ dinary aljihabot, and since tliis letter occurs twice in the 
^PPearan ^ sequence, the number 1 is written under the fii'st 
its seenn ^ sequence, and tlio number 2 is written under 

appearance. Thus: 



is c! ,, i- the ordinary alphabet 13 B 'Ihe key sequence 

» 'Melully examined to see if it contains the letter B. Since this letter 
, ^ not appear in the illustrative key sequence, the latter is exaimned 
contains the letter C. Tliis letter occurs tivice in the 

‘ If the key consists of a word or plirase containing more than 25 letters, tliose 
r the 25th letter are merely omitted. 
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illustrative key sequence and the first C, therefore, is assigned the 
number 3, the second C the number 4. Thus: 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

c 

H 

I 

N 

E 

S 

E 

L 

A 

U 

N 

D 

R 

Y 

C 

H 

I 

N 

E 

S 

E 

L 

A 

U 

N 

3 








1 






4 








2 




(7) The next letter in the ordinary alphabet is D, wliich, 
present in the key sequence, is assignedtho next number, and ^ 

Thus, the process is contijiucd until each letter has been assig ^ 

number. The woj-k must be done carefully so as not to jj, 

single letter. If an ciror is made in tlie early stages of the woi i 
necessitates stfU’ting afi'csh. Tlie operator should bo es])ecially 
with the letters which immediately follow one another in the on 
alphabet but are present in the key sequence in reversed order, 

KD, FiC, ON, and so on. It is easy to iiiake a mistake in sue 
nnd to assign these letters numbers in a sequence that is the le 
of what it should be. 

(8) When the numbering process has been completed an 
work has been correctly performed, it will bo found that g^|.gg(; 
of the key sequence has a number under it, and that the 
number that appears is 25. If tliis is not the case, it is an 
signal that an eiror has been made. It cannot, however, bo 
that so long as every letter has a number under it, with the gif 
number 25, this is immediate and conclusive jxroof of accuracy i'^^ 
Work. The operator should invariably check his work; better 
two clerks are available each one sliould derive the 
independently and the final results should bo checked by 

(9) The keyphraso selected as an o.xample in the foregoing dese 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

C 

H 

I 

N 

E 

S 

E 

L 

A 

U 

N 

D 

R 

Y 

C 

H 

I 

N 

E 

S 

E 

L 

A 

U 

3 

10 

12 

16 

6 

21 

7 

14 

1 

23 

17 

5 

20 

25 

4 

11 

13 

18 

8 

22 

9 

15 

2 

24 


(10) It is this sequence of numbers which indicates the .g 
^nch the successive alphabet disks are to bo assembled 
s laft fi-oin left to right. Thus, according to the foregoing key soqna®®®' 
n phabet disk No. 3 comes first, that is immediately to the riglit o 
le guide-rule disk; alphabet disk No. 10 comes next, and so en- 
Phabet disk No. 19 is the last in this particular key, and after d 
las been jdaced on the shaft, the retaining plate and thumb nut are 
‘nhled and the latter screwed down a distance sufficient to keep fl*® 
assembly together and yet permit of revolving individual disks freely 
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SsSp'^Rn^’n eastern EDGE OF WOODS ALONG 

oy2 ROAD. WILL REMAIN IN OBSERVATION. 

a. The mesc, • . 2D BN 

% in Imes of*?^ down on the work sheet underneath the 

insertion of cinl j Space is left under each line for the 

'nations and nun K procedure in connection with abbrc- 

Tims: ^ appearing in the text of messages, see par. 68.) 


1 

p 
























c 

H 

o 

I 

4 

N 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

;is 

I2C 

► 21 

.22 

12Z 

)2^ 

125 

3 

10 

12 

T 

E 

S 

E 

L 

A 

U 

N 

D 

R 

Y 

C 

H 

I 

N 

E 

S 

E 

L 

A 

U 

N 

C 

0 

Xb 

H 

6 

21 

7 

14 

1 

23 

17 

5 

20 

25 

4 

11 

13 

18 

8 

22 

: 9 

15 

i 2 

24 

119 




I 

R 

D 

I 

N 

F 

H 

A 

V 

E 

J 

U 

S 

T 

R 

E 

A 

C 

H 

E 

D 


— 

— 

— 

•—■ 

—_ 




















E 

A 


*Tl 


_ _ 






















o 

T 

E 

R 
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E 

D 

G 

E 

0 

F 

W 

0 

0 

D 

S 

A 

L 

0 

N 

G 

F 

I 



—- 

— 

-— 

__ _ 
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E 

T 
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0 
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0 

A 


— _ 






















D 
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1 

L 

L 

R 

E 
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A 

I 
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I 

N 

0 

B 
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R 

V 

A 

T 
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letters of tb.? o-ned to form a continuous horizontal row 

“'Otters MadTnrtmn“I°f“io right«!«»? the outside of the cylinder. 
The guide-ruin Jill be found very convenient in marking the row upon 
the letters are being aligned, thus reheving the eyes of unneces¬ 
sary strain and reducing the chance of making errors. After all 25 
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l.av« t»a,. alignc,!, tho 
no disk can l)eooino dis|)lnccd nccident J 

outside of the cylinder 

tiers, of which 24 rows are folly 24 visible ■»« : 

r partially obscured by the guide-rule Oneo 

,e plain-text row that has J«et been «UiP, ‘ «, ^.r 


c. 

letter 
or 
the 


aj 

ir 


las just been set up, and the phi^ 

cipher-text rows any one oj which may at wndojn andth 

text row. One of these cipher-text rows is selected pigm 

letters composing this row are wntten j-oW begmJ^ 

text letters on the work sheet. Thus, suppe^sx » ^ ^ read at 

has been selected, the first ciplicr 


LYEUJ 

follows: 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

c 

H 

I 

N 

E 

S 

E 

L 

A 

U 

N 

D 

R 

Y 

C 

H 

I 

3 

10 

12 

16 

6 

21 

7 

14 

1 

23 

17 

5 

20 

25 

4 

11 

13 

C 

0 

T 

H 

I 

R 

D 

I 

N 

F 

H 

A 

V 

E 

J 

U 

S 


__ 

_ 

_ 
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— 

— 
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— 

— 
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E 

U 

J 

D 

J 

N 



Q| 

B 

F 

y| 

N 

E 

c 



\vhiclr 

rk sheet as . 

It IS not iieccssai.y tu muivc tiuj ji-t- uit. o.-s, selected'' 

ci])her-text row (aliove or below tlie jilain-text row; cipl'^^ 

is it necessaiy to indicate it in any manner whatevei 

■ , sluxl*'- 


lessage. . a the sl“X • 

d. The thumb nut is loosened, but not renioveti , j^yt 
The next 25 letters of the message are aligned, the thuiii ar® 

down against the retaining plate, the lettera in the a excepl- 
checked, and again any one of the 23 visible cipher-tex for I'l’® 

the one used to encipher the first line, is selected at ru under 

cipher text. The letters in the row selected are written sup' 

the second lino of plain-text letters on the work sheet. sh®®*' 

posing the row beginning KZBYJ . . . , was selected, the 
now appears as follows: 








































1 

2 

3 

4 

5 

6 

7 

8 

9 

10 


12jl3 

14'l5 

16 

17 

18 

19 

20 

21 

12223 

24 

25 

c 

H 

I 

N 

E 

S 

E 

L 

A 

U 

N 

D 

R 

Y 

C 

H 

I 

N 

E 

S 


7 

A 

U 

N 

3 

10 

12 

16 

6 

21 

7 

14 

1 

23 

17 

5 

20 

25 

4 

11 

13 

18 

8 

22 

-- 

9 

15 

2 

24 

19 

C 

0 

T 

H 

I 

R 

D 

I 

N 

F 

H 

A 

V 

E 

J 

U 

S 

T 

R 

E 

A 

c 

H 

E 

D 

L 

Y 

E 

U 

J 

D 

J 

N 

Y 

P 

Q 

B 
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Y 

N 

E 

C 

N 

H 

P 

F 

A 

G 

P 

G 
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N 

E 

D 

G 

E 

0 

F 
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0 

0 

D 

s 
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L 

0 

N 

G 

F 

I 

|k 

Z 

B 

Y 

J 

I 

A 

H 

N 

S 

R 

A 

N 

D 

J 

M 

7| 

|7 

S 

Y 

R 

I 

T 

S 

N 


This process is continued in sunilar inanner with the tliii'd and 
ourth lines of the plain-text message. It should never he made a 
Practice to ^^javor^\ that is y frequently to select a 'particular cipher ■‘text 
aJoye or below the plain-text row. As irregular a selection as 
possible should bo made, and the selection of the cipher-text row 
^Immediately above the plain-text row or immediately lielow the lower 
m SO of the guide rule should be avoided. Supposing these instruc- 
|ons to have been followed and that there has been selected for the 
0 cipher-text row representing the third plain-text lino of the mes- 
the row beginning IIAMTF . . . , and for that representing the 
line, the one begmning PJNSY . .., the message now stands 
follows; 
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10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
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22 

23 

24 

25 
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6 

21 
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1 

23 
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20 
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15 
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U 
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H 
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H 

E 

Y 

T 

B 

G 

P 

Y 

K 

G 

M 

G 


J There are left only 11 letters to be enciphered, not enough to 
make aToVplete row of 25 letters. This, however, makes no differ- 
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ence in procedure; those 11 Icttci-s are merely nligncd and a cipher- 
text row is selected to represent them. Supposing the row beginning 



g. The cipher text is now to bo copied on the message fe” 
5-letter groups. It is as follows: 


LYEUJ DJNYP QBFYN ECNHP fagpg 

KZBYJ lAHNS RANDJ MEFSY RITSN 

RAMTF OMOKE NCSHC SPMXH TEXGM 

PJNSY VAWUC HYFHE YTBGP YKGMG 

URZGH EJQSM D 

h. The last group of the ciplior message is, however, ^ ^ot 

group of 5 letters. It is made so by adding four X’s. ..ioher 

to be cryptographed; they are added merely to complete the las® c p 
group. The final message becomes as shown below: 


LYEUJ DJNYP QBFYN ECNHP FAGPG 
KZBYJ lAHNS RANDJ MEFSY RITSN 
RAMTF OMOKE NCSHC SPMXH TEXGM 
PJNSY VAWUC HYFHE YTBGP YKGMG 
URZGH EJQSM DXXXX 
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The message as it now reads Is but one of many different forms in 
which this same message could appear externally, depending on 
exactly which of the available cipher-text rows is selected for each 
line of the encipherment. 

68. Cryptographing abbreviations, punctuation signs, and 
numbers, a. Authorized abbreviations appearing in the origi- 
na plain-text message may be enciphered as abbreviations with- 
Examples: Am Tn=AMTN; E. V. Brown Sch= 

EVBROWNSCH. 

6. Normally, the writer of a message spells out the pmictuation 
CoTom transmitted, as, for example, STOP, COMMA, 

, , ’ If u message contains punctuation signs not so spelled 

out the message-center chief must indicate whether they are to be 
onu e or spelled out and transmitted. 

. . and ordinal numbers when speUed out in letters in the 

ongmal plam-text message are always enciphered exactly as spelled, 
nlnin numbers when expressed in figures in the original 

must always be speUed out, digit by digit, in 
cTPtographing. Exai„pte; 

4=POUR 

«o:EoufSo“ERO™ four HUNDRED, 

--^3lSSi^SoPO.NTSEVEND.SHSEyEN- 
onot: PIVEEIGHTPOINTEIGHT 

12- 01 „ ^'TWozerozeropive 

S-ir-,, ■ ^^‘-^^IINETWOZEROONEAM 

I ’^•=EIVE0NEP1VEPM , 

dlSl>y T,» oTOssion 

" „Xn or' mbiguity. E.- 
amplL 1 1 tT TnlsEVENTHPACKTN; 

11 th p- f^^n=THlRDBN; 7 th Pack 

AMTN ^^NEREGT; 403dAinTn-lu 

09 ■ Knowing the keyword or 

kevn'br ^^‘^yP^'^graphing a ped as described under para- 

3 rT’ f Ss is assembled accordingly. 

6G, and the set of alpkab^^^ten jp hnes of 25 

letters space being left under 


450 


58J)dOr>°—44_7 
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\ cTh it appc'U^ 

message given under jinragrapn 67/i, 1 

following form: 
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|17|5|2025| 
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161718 
H 


202r22iS^l 


___n:_ 

l|a1u1n 

islajw'w 

gIHg 


G M 


- on tlio device 

b. The first 25 letters of tho cryptogram arc set '' thi 

the letters being aligned in a row from left to down tli 

guide-rule. Fixing the disks in this iiosition by , or backward 
thumb nut, the whole cylinder is turned slowly, f these row 

and each row of letters is carefully examined. ^ loft 


and only one will read intelUgibly all the way «cros9 . 25 ciph' 
That is the row which gives the plain text for f*'® ^n t^e woi 
letters. Ihese letters are inserted in their proper pl“^® 


sheet, giving the following: 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 
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E 
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D 
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H 
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10 

12 

16 

6 

21 
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14 

1 

23 

17 
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20 

25 
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11 

13 
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Y 
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c. Ihe thumb nut is tlicn loosened, the next 25 eipher lettem are 
set up, the assembly is locked into position, again the whole cylinder 
is slowly revolved, and the plain-text row of letters found. These 
are written down in their proi)er i)lace and the process is continued 
with the rest of the cipher letters until the message has been com- 

Pletcly dccryptographcd. . , 

< 1 " In the case of a cryptogram the last few letters of which do not 
form a complete set of 25, if any dilliculty is experienced m picking 
plain-toxt row, the contot ot ll.o picowling part of tlio inos- 
AouUI givo a good dno, 1„ tho caac ot tho illastrat,™ incasage 
.toyc it sh„„M be roalirod that tbo tot topr lettcnr of lire 
“ "y bo tlecryptograplrcd. since they woio merely 
''TPH'i-aphing to make tim tot group of tl.o cryptogram a oomplole 
gioup of flye letters. They are omitted from tho *0^^ 

^doThy r,—1”- chief 

"t rcCros" Abbrevi¬ 
ations ard'’pTr’’r"^’- "'^'T^^ever coilied exactly as they 

stand in ti, signs are, howevc , P 

ue decryptographed message. 

Section XIV • 

QIPIIEK machines paragraph 

Iinpoitanco of o) i . r.rvntoKraphio communication---- 

'i’raiispositi ' ®’Pf'or macliincs in modern crypt g . 71 

f^ubstitiitioi7'.. . 

advan+^ polyali)habetic Ili'Jnes .... ^ 

■'“"‘^00 ,„.,.er eryptographic 

of cipher machines i e_y of this 

text The remarks mad Relieved to be sufli- 

cient the present trends m <1 jj;poi.tance of a Imowlcdge 

of th “ student a clear idea ^s adjuncts to modern 

crvnlV*’'^'^ limitations of c>pi‘'J^ j.^ j,, this text only observa- 
tinno ^*'*^P^'ie communications. .,io leaving for a future text an 

evrro N- character can in the construction and 

of detailed Uorc and more attention is today 

h!inr!^‘^'^ e.xainplcs- ^pl,y and it is highly probable 

that withe'll ftmrcipl^er machines will replace code books 

the near futuit- . Jrniartcrs. 

0 a ai^e extent, even ni *®'^^^j^^chines.—These are rarely encoun¬ 
tered; the^lerofS^d ^ f '’T 

so far as is kuowii no actual maclune has boon constructed conforming 
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to the spocificationR covorod thoroin. It may ho said that substitu¬ 
tion methods lend themselves so much mcn*o readily to automatic 
eiiciplierment than do transposition methods that the possibilities for 
the construction of cipher inacliinos for effecting transpositions are 
almost coiiiplctcly overlooked. Basically it would seem that a ma¬ 
chine for effectiiig transpositioji would have to include some 
“storing up” the letters until all the i)lain text has been led into 
the machine,” whenmpon the transposing process is begun am le 
letters arc finally brought out in what externally appeals ^ , 

randomized order. It is conceivable tliat a inacbino might bo deyse 
in wliich the disarrangement of the letters is a function ” 

mimber of letters comprising tlic message; daily 
domizing machinery could he provided for by resetting the elc 
controlliii}; the process 

,ra Substitution-cipher maohines.-u. The 

for „ll„ct,„g it. The c.y„4™„l,s described in tho '"J 

»otious. os well OS the simpler yorictics looking use inu* 
or more su]x>.rimpose(l, concentric disks are iu , 

rr mcylanls that ore .1" '“f 

Sio , 1 r".' '“I.. outoiiiotiP I mierotion. 

for o let"* 1”*^'“"rrkeiily siiseoptililo to crroi’S in moiiy men 

W. sSfe, "lo '■»» '»»'> .ftiSc ill 

I’nle, realized t*'c woiild-bo invent ‘ rj,jg them; 

nor have they problems coii 

thorough knowledgo°(!rr‘^ problems with t ic ^^^^gj-aphy^ 

with Its many limitai; ^*“^‘*™tical and iiractici , crypt- 

analysis, with its wide theoretical as well as ' ^ i„goniiity. 

However, . 1,^0 the 

cip ici maclimc is attacked^**' of developing and i ;,. id crypt- 
analytic engineering stla competent cryptog'-‘d> 
developed. At this ’ '"^^dy efiicient cipher arc now 

in actual use for practiel; '^; very excellent machines 

b. It IS obvious that aum*^^ *^‘^"^»onii cations. choukl be 

cquippoHl Witt, 0 koyb„,„.,7“J’«Mc devices of this '“‘"‘"j mltotiiig 
thot of ordmoiy typcw,“Lf"'« W«'l, resembling ‘3„i,,„|a. 
tioii these moeliincs m„et rmtlieimoro, for i».l>"' ,,r„ diim 

speed m operation, such as eW h'^''Hiated l>y mechanisms a 
electromagnets, etc. *^*‘‘e or spring motors, compres , 

73. Machines affording oni . — 

Little need be said of those substxtu 1 • 

the Icoyboard are merely covored"'^'^^ which tho ordinn^'y k<^y 

lettei's or characters. They viel<l ^‘oniovalilo caps bearing ^ 

J' yioiu only the simplest type of substitu- 
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ion cip icr known and have little to recommend them. Even when 
‘mi such that a whole scM’ies of alphabets can be brought 

2 ^ o p ay, 1 the encipherment is monoalphabetic for a succession of 
mnl before the ali)habot cluinges, the degree of crypto- 

are int relatively low, esi)ccially if the various alphabets 

of ^ result of tb(‘ir derivation from a limited number 

74 y "^^^^^Ponents. 

recent polyalphabetic substitution.—«. In 

several cinl I‘nvc been i)liicotl upon the coinniercial market 

not be nioro tlian orclinaiy interest, but tliey can- 

sccondarv nunil)cr of 

•nent, or rati “ limited, but the method of their employ- 

the cipher u\^\ **^*‘*'“*'‘ir in wliich the meclianisin operates to bring 

ciyptogramti into play is so ingenious that the solution o 

difficult, means of the machine is exceedingly 

other tlvinm iy be clearly recognized and understood: 

o^ktMhetscaJri manner oj shifting about or varying the cipher 

oj alphabets ^ cryptographic security than does the 

to city 2« 7 ror cinple. it ^ O'"*” 

“toyield«l|)l,abets ill siicli an ■"J'“'o 00 oi'moio 

taxed alpha). , .®teunty tlnin is alTorded by ll'C use ’ , j -j’be 

taportancetft.® W- or an easily-asc.rW™d 

One of tho^^ IS not generally recogni/e of good 

cipher machiii limitations upon tbe I 26, 

does Pot lend I'ii® number of lettcis . j j^nnipulation, 

i W to mechanical or niath‘'*.»«,f; ^"fecl ,,nare. 

“ the alpl,aK the factoi-s 1, 2, and 13; nor is it more 

^“^Id bo done ^ consisted of 25, 27, or 36 the 26 -Iotter 

alphabet intrn'i addition of Hsnyii® ^nnfculty that the crypto¬ 
grams will pr, tlic serious practical < j ^be cost of trans- 

mitting i.^^^'^tain characters other than lettc^ bob by Morse 

Wwaphvt'''’’'’^'-'"® of letto«, %"t«; or another, e.n- 

ployed to i^^’i^’iihitivc. Subterfuges of impractical and 

expensive this difficulty’ «• 

c Tl -ous machines which have 

t‘‘uafai-Lf underlying the ^;‘“,mnplox that no description 

of them 'developed arc so divemo an in the next para- 

granb ^mdertaken in this ^ j. dealing with the advan- 

commumca- 

75. ThJ’ T nTsadvantages of cipher machines.- 

a TTt.ri ® and . ,g predominant in military 

h’JPtograX wiZ%’.e“unitocl Stat« Army but the .averse is now 
the case. This important change lias been the result of advances 
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made within comparatively recent years in the design and construc¬ 
tion of cryptographic systems and ap])aratus. It may be useful to 
compare code methods in general with methods based upon ciypto 
graphs and cipher machines in general to note the advantages an( 
disadvantages of each category of methods. ^ 

h. (1) When designed for keyboard operation and equipped wr i a 
standard typewi’iter keyboard, cipher machines afford iniici 
speed in encipherment and decipherment tlian do any ^Miand-opcia ec 
cryptogi-aphic methods, including codes and certain types o ciyp o 
graphs. Comparative speed tests gave the following data leccn y. 


Nurnber of groups or words per minute 


Method« 

Cryptogrnphing 

Docryptograp'i^^K 

1 

4.04 

1.94 

M'lettor or 4-flguro group.s). .. 

.6.00 

2 



3 

4 

5 

1.76 

2.74 

3.14 

(5-lottor group.s).. ... 

f6-lettcr groups). 

... 

6 

30.00 

(5*lctter groups)... . 

.^—— 


1 Method 1—A 2-i)art code of 6,000 groups iinenciphercd. 

Metliod 2~Tho same code enciphered by a secure system. 

Method 3—The obsolete U. S. Army Cipher Device, Typo M-94. . provided with a 

Method 4—A small electrical cryptographic machine giving lamp indications nu 
tyjpewriter keyboard. ,, „ot provided with 

Method 5—A small mechanical cryptographic machine producing a printed rccoru 
a keyboard. , provided with a koy- 

Method (^An electrical cryptographic machine producing a printed record and i 


(2) When properly designed, cipher machines and ccrtnin 
“hand-operated” ciyptographs afford greater guarantees o and 
gi-apliic security than do code metliods or hand-operated 

paper” cipher systems, because macliines can accurately, spccc i 
tirelessly perform far more complex ciyptographic 
can possibly be performed oven by the most skillful 
working with code books and cipher tables, or with luiud-opoi 
cipher systems. 

(3) Though the initial cost of a cipher machine may compnre un- 
favorably with the initial cost of a code book, the ovcr-uH cos 
maintaining cryptographic security by means of cipher machines is 
probably less than that in the case of code systems. Good machines 
designed by technically qualified experts afford a multiplicity of keynig 
arrangements; once distributed there is no necessity foi' recalling 
“old editions” and substituting “new editions,” as is tli® 

code books. Therefore, the labor costs incident to the necessity for 
repeated preparation, printing, and distribution of code books, to¬ 
gether with the labor costs incident to the necessity for repeated 
accounting operations, correspondence exchanges relative to issue, 
receipt, etc., in the end overbalance the higher initial cost of cipher 
machines. In this connection it should be stated that merely the 
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cost of printing an edition of 200 copies of a largo 2-part code is well 
over $25,000. lliis docs not include the cost of the labor involved 
in the compilation of the code, nor of that involved in preparing, 
printing, and binding cipher tables for supcrenciphei’inent, etc. 

(4) 1C sccinity of a cryptograjihic system involving the use of a 
piopei y t esigned cryptograph or cijihcr machine is not wholly dis¬ 
sipated by the capture or compromise of the machine or device itself, 
as IS the case with a code book. 

ti i^r ''«iul, it must be admitted that, as a general rule, 

le solution of a very few cryptograms by long and laborious crypt- 
analysis makes it possible, in the case of a cipher machine, to decrypto- 

wliorLTT^iT ull future cryptograms in the same machine; 

^ 2-part code the solution of a few code 

of the code n ^ ‘^‘^^'"'nplished at all, and practical analysis 
Even should ^^ait the accumulation of a large amount of traflic. 
by theft or enm oue or two code messages be obtained 

subsequent in would not permit the prompt decoding of 

“Tc c" TS,"' 

(c) A • . ‘Puci messages. 

mechanisms' J'lachuies are, as a rule, complicated and delicate 

proper opomtiof 7 «‘>»«><lera.ble technical skill for their 

be possessed hv ®^‘yP*^"S>'apbic clerks, skill which may not always 
comp^ What is perhaps more importiuit, 

personnel for thSr' properI ^‘"'^'"Thoy iSarUy 

oirt;" ^e av^i 

cipher systeir hec^use code books or 

less stor^n a iZ 

be carried fonvai-r^r^ff ‘’'“ 1 '" as Division. 

Hence, code methods”^ I'eadqaartci-s, [ g and troop 

fonnations" ""W predominate in the lower echelons 

enciphering aiuUlcc^r‘'''"P'‘Wc<l is at all co»h>Pcato^ 

call for 0^1 r relative to 

their correctfon exchanges of service nm-^ S 

romnln . * . this may be a donh complex 

cinl ^ ®''P^‘*'c*>ciphcred code is j ust as subject to crrois 

cipher machine. . . 

(8) As regards administrative communications, 

compete with code from the point of view of coiidensat ^al 

nll*"^ t ^ cipher message is always at least as ong ^ 

plain-text message, whereas a eode message prepaiec ^ 
large code specially compiled to give a large degree c ^ messasre 
usually much shorter than the equivalent original p am ex 
This arises, of coui’sc, from tlie fact that in well-consti uc cc co 
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single groups of 4 or 5 charactei's may represent long phrases or even 
whole sentences. 

(9) As a rule, cipher devices or machines cannot readily bo operated 
under all sorts of weather conditions. In very damp or in rainy clim¬ 
ates, machinery failures are quite common, and it is dillicult to keep 
delicate machines in regular service. Moreover, in hot, humid clim¬ 
ates no machines can long survive the disastrous corrosive effects of 
moisture, vegetable growths, etc., whereas printed matter is hardly 
affected by these elements. Finally, under field conditions, while a 
code book can be manipulated outdoors in all sorts of weather, in rain, 
sleet, or snow, in high altitudes where the temperature is very low, 
or in the tropics where it is very hot and humid, a cipher machine, 
especially if electrical, often cannot bo operated with success foi moie 
than a few minutes or, at most, a few hours. 


E. CODE SYSTEMS 

Section XV 

CODE SYSTEMS IN GENERAL 

Preliminary remarks_ _ 

Intermixtures of code text and other kinds of text_ 

76. Preliminary remarks.— a, Sections XIV to XVII, SpoeW 
Text No. 165, were devoted to a general consideration of code systems 
and enciphered code. It was tlierc indicated tliat code systems are 
systems of substitution where the elements of tlie substitutive process, 
comprising Icttcre, syllables, words, phrases, and sentences, aie so 
numerous that it is impossible to memorize them or to iccons luc 
them at will when necessary, so that printed books containing cse 
elements and their code equivalents must be at band m order o 
cryptogi-aph or decryptograph messages. The various types of code 
gi-oups were indicated, together with methods for their construction 
by means of permutation tables. One-part and two-part codes were 
briefly discussed. Finally, a few words were added for the purpose 
of indicating various types of enciphering code for gi'catcr cryp- 
tographic security. 

6. Practical cryptogi-aphy must take cognizance of the fact that 
the texts of governmental as well as commercial and social telegrams 
must conform to certain standard forms and practices. A subsequent 
text will go into these mattem but at this moment it is only necessary 
to indicate that international telegraph regulations in the past 
have exercised an important influence upon the structure of code 
groups and upon the selection of cryptographic systems for their 
encipherment. 






101 


c. In the subsequent paragraphs, when reference is made to numeri¬ 
cal code groups^ or number-code groups^ or figure-code groups^ it will be 
un erstood that the code groups are composed of digits; when refer¬ 
ence IS made to dlphabetical code groups^ or letter-code groups^ or letter 
groups, It will 1)0 understood that the code groups arc composed of 
ers 0 the alphabet; and when reference is made to mixed code 
or miml it will 1,0 riiulorstood that the code grouiK arc 

compose.1 of latami.tarcs „t letters and f,gores. 

Q 1 ^ ®^^^xtures of code-text and other kinds of text, d, 

and^on 1 ^odc messages is the practice of mixing plain text 

code ^^niinon in modern communications. In governmental 

today so *^^*^*’ naval, or diplomatic, such intermixtures are 

Because IW Bnulamcntal rules of cryptographic security 

the adiacenl *^ **^\*^'*'^^*' words give definite clues to the meaning o 
convey no though the former may 

thonisclvoa (such words ns 

fatal '"'T.r T. »rti" 

countonaS'sril “tc™!’.''"'^™'''"'' 

no provWo""’''“I’'’"'*'"*® wwdtlot'in^^^^^ 

surely lead to rh m the message, si 7 ice ^ ^he corre¬ 
spondents encinir' '^'^^'^ihorized reading of the ^ (^uy 

prearranged c!n ’ whe" the code is 

limited in its ^Iso, i» some cases, are not 

represented the ^ the various inflectioi inflections 

(“ed,”“ing’»».. ^®|'‘’^®PoJ^tlmits may suffix ti P j ^^ever, is not 

•o ^ccomntc'rd T' 

Phicsccuritv of tl ’ ‘t considerably 

c Sen, (^ ^ whole system. ,noro codes within 

the 8^111^1 '"‘''•i-^spondcuts make use of two or arc making 

use of a V 'i'l'is is occasionally the case w special 

expression ''«»»nioi-oial code which docs not .^.ggions being 

contahi r- for their business, the ^^^evor, the inter- 

mixt.n r"' private code. Soinotimos, purposes of 

f code text from sevoral codes is ^one 
secrecy, though it is, as a rule, a rather poor subtcifug 
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Section XVI 

ENCJlMJEliED CODE 

Paragraph 

Preliminary remarks on enciphered code__ __ 

The general types of methods of suporencipherment.. 

Transposition methods_ SO 

Substitution methods_ 81 

Arithmetical metliods_. 82 

Single or fixed additives_.. . .... . 83 

Hepeating or recurring-key aclditive7a^ur8ubVractors’y.^'-’. 

JNonrepeatmg additives and subtractors .- 

Concluding remarks on arithmetical methods.'.l’”^’’”"!'-^'. 

78. Preliminary remarks on enciphered code.—a. The purposes 

of oi,c,,,I k, code have, almi.l, bM,ii cs|,laiiic(l in Uio proviomtel. 
S'al.T ; "Klicationa of „,|s. The a„l)crini|.osil«' « 

tno term encicadp^ i . and code. On , , r 

«-osnpem,;::i^ntn.ri; • T " .1.0 nnal proch^f 

enciphered and code. ’ dorivod by telescoping dn 

deciphered code and ^eciph^^^^f ^'’^Perencipherinent, oi' 

-tor gives as a Xl^^otrc. Tho -ndi- 

BoU. atn ?' iphorment-- 

^porccipho.. co<lc. T mow ^ 

-Cfirs « 

sombling iicitbor "'""'''"mS"'’' “"‘’“‘’"“re'lUy fo- 

xtOfly will load to tho oinouS" ■'"»«tKr‘’"®i’, “'’'ver 

' l^ronouiiced “play-codo" and “n-sigh'-codo." * ■^"^’^liSpositioil ilictliods 
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appicd strictly within the code groups, hy rearranging or shifting 
a out the letters or figures composing them, have heen used to a 
imitc extent for a numl)er of years. Prior to eJanuary 1, 1934, trans¬ 
position pi ocesses for producing enciende messages, i. e., for super- 
cip eiing code, were practically never employed in commercial or 
coTiQ P^iictice because they destroyed the regular vowel- 

to stiucture of code groups so that they no longer conformed 

ferroA international telegraph regulations re- 

were lih 7i]b, However, the restrictions in this respect 

tran^n^GV indicated and it is therefore probable that 

n^uch superenciphering code will be encountered 

6 . On,., nf t-l'P past. 


' One P-t. 

'DOS,. i« . "^^st coinuionly used transposition methods oi ns 

trices ^’^^'y^d-eolnninar transposition, either with spccia 

'“WS, (lesiLrna r . . - - .^vithout tlicsc 


6 

purpose 

matrices desi7 ' ‘^'^■•>'''‘''<^‘r>l>iiiinar transposition, eitiu 
features' f*”"'ns liaviiiff nulls and blanks, or 

and requiros'r **■ I'owever, is very subject to enoi 

ofcourl wh ui^ Personnel for its practical operation. It is, 

bo ^ military usage, thougli it ean 

™nstrS »“»■■■ Solulion ol si,cl. « 

is ''“.V ‘IlnicU .„,utcr, cspecl.Jly H tl.c !•«='« 

«»method..^. Ml „f ti.c 

Xtoo“ i'sTpr 

session of tl^o Jj''’ alpliabets. When the pjjicodo groups 

arc thereforo ^r.Vptanalysts and the origua security, for 

reasons not 'and, this mctliod does not ^ .kq actual code 

book is not , boro to indicate. Kvun who commor- 


^1^1 codo «4 i • known that it is 

^tructiorofr''^. bn-oups of tl^ 

C- PohinJ 1 ^‘P'mu- aliihabets is not ddhcul . polyalphabotic 

“'‘^y be a s,M. «lpbal,ets which set to be used 

(2) . by indicators inserted in the m ^.^ample, 

the ron *^^’* *^ Polyalphabotic method ’“'‘W. ug.kcy method, the 
interr method, the running or conti ^ ,,ic methods 

m cuupted-key method, etc., can bo «fPl'‘^thic and monographic 
be used; also, combinations of digrapb'C 

*‘^''P‘mit. 1 Tt'or example, using 

( ) 1 aides of various sorts are often emp oyc • ^ living pro- 

table applicable to code groups of 5 hgurcs, a table ^v g 
nounccahlc combinations of letters for the 

result in converting a group such as 75152 mto the lottei ^loup 
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KOBAL. Tables for siibstiinting coiobinations of letters into other 
combinations of letters are, of course, equally feasible. The substitu¬ 
tion may be strictly digraphic, combining two 5-lettcr or 5-figure 
groups into a series of 10 digraphs; or it may be a combination of 
trigraphic and digraphic substitution, each 5-charactor group being 
split up into a 3-character and a 2-character combination. Other 
combinations are, of course, also possible. 

(4) In all the foregoing methods the chief objection is that the 
advantage of the 2-lctter differential feature is more or less dissipate 
by the encipherment, but this is true of every substitutive metlioc 
that is superimposed on code. 

(5) The disadvantage referred to in the preceding subparagraph is 
absent in those cases in which the encipherment Operates merely o 
substitute other code groups of the same book for the message coc o 
groups. The most common methods of this type make use of t ie 
figure-code groups, the latter being manipulated in various ways 
change them and the resulting groups then being given thoii let er 
code equivalents. Some of these methods are explained below. 

82. Arithmetical methods. — a. These are today the 

portant of the various methods of supercnciphcring code, and mus 
dealt with in somewhat greater detail than the foregoing 
There arc several different types of treatment, each of which wiH 
briefly discussed in the subsequent sub])aragra])hs. , 

b. In discussing these arithmetical methods many references to ^ 
terms additives and suhiractives, or suhtractors will be eiicounterc . 
They will be defined in due course. 

83. Single or fixed additives.— a. If the code groups are 
cal, the addition of an arbitrarily selected mimbor to each code 

in the code message constitutes a simple form of supcrenciphcrinc’ • 
It may be varied by prearrangement between correspondents, simP 
by changing the fixed number as frequently as may be deemed ne 
sary, or by some easily arranged system of change. The g^i'P 
digits composing tlie number whicli is added to the placode values 
commonly termed an additive group, or, more often, an add^n^< 
or sometimes simply an adder. In dcciplior mont, the uddifi^® 
merely removed from the received cncicode groups by subtraction- 
leaving the placode groups, whiidi can then bo deooded by reference to 
the code book. Often the date or some number derivable from the 
date is em])loyed as the additive but usually4,he number is simply «■!' 
arbitrarily composed group of digits. Because the same number is 
employed throughout the encipherment of the entire code message, 
such an additive is called i\ fixed additive, 

b. Methods such as the foregoing are particularly weak crypto¬ 
graphically if the basic code book and the code groups embody limitH' 
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tions in construction. For example, should it be employed in con¬ 
nection with a code having only 3,000 groups numbered consecutively 
from 0001 to 2999, then the initial digits of the groups arc limited to 
die three digits 0, 1, and 2; the application of a fixed additive can 
dicreforc produce only three diircrent digits as the initial digits of the 
encicodo text. This i)henomenon would, of course, soon lead to 
t e determination of the initial digits of the placode groups, 
c* One rather simple scheme involving the use of fixed additives in 
6 case of codes having alphabetical as well as numerical code groups 
^0 apply the fixed additive to the numerical code groups represent¬ 
ing die plain-text words or phrases and then take the alphabetical 
groups corresponding to the sums as the final encicoc e gioups. 
codes of this type tl.c additives may l)c rather large numbers and 
c process of fijicling the ali.habetical code groups 
h u^s is very easy. But in codes vvlxerein only « 

St that is, no ligure-code or W num- 

’ It employed must """tncaHy ^ forward, 

for ,,Y '^C)uld be extremely laborious to count 5 g nihors from 
to !'> ouch 

d (A\ T ^ the latter 

'*^ay adding a fixed mimber in wicip > number 

must bn ^'^tracted, in which case, in dcciphcn > ^ group may 

tcrmo^l^ ti'e encicodo groups as subtraction is the 

process ^ ^‘obtractive grouj), or svhtractor, icc ,p becomes, of 

ZT onci|.l,t.r,„onti i.. 

('ay additive. , , .nTiorical group may be 

*'lternat!f subtraction of a ^ some simple sub- 

®^diar i ^ the same message, ‘^®®p"j^-"e”groups corresponding 

tothel Tent consist of the nmnbers 

200 1 might, by prearronffc y.^^ nianncr. Oi the 

CO).’ ^t>0. These mi<dit bo used m J ,jnbcrs alternatively m 

ssr"r “ ''“:,',r.r+So. -. 00 , + 400 , -^oo. 

+ irin i^nid subtractive mannci, ^ -nef na 

' +200, -100, etc- noncarrying addiUon,^ is ] 

ion without “carryuig. „ ^vith “carrying , an 

■ ■ snbtraclum, is^jusi 


, 400. 

Additk 

that ^ 

traction without “borrowing/ j^^ubtraction with “borrowing 

,: . “Pple as normal subtractron, t ’ o„f]cnts agree m advance on this 

on-' necessary that the throughout a message. In 

_ and apply the p* -oecss ^ perform these processes 

practice, however, it is more „ ^j^^rations can be 

'out «■ 

from Ufl u dear: 

an example which will make 


Herewith follows 
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Example A 

(a) Example of “nonmrn/ini?” (wWiiton ill cnciplicrmcnt: 

'^nR? 9015 6710 

(2) Fixed Kroiip for addition. 5678 567- 5_^—^ 

(3, Enolcclc.- 0185 8650 4683 1388 

(b) In dcciiihormcnt, “nonborrowmg" subtraction is applied: 

(1) Eiicicode.. ...0185 8650 56^3 Sgj^ 

(2) Fixed group for subtraction. 5678 5678 ‘ _ 

(3) I>l«eo,io.5517 3082 9015 

(c) Note that in the decipherment process the encicode serves as the mw 
additive used in the cuciiihcriueiit serves as the subtrahend, a 

is the remainder. * 

/. Ill tho foregoing example the additive remains tlio same 
out the superenciplierment hot it is obvious that this 
simplest sort of an arrangement. A series of different aa'i 
readily he em])loyed, as will be explained later. . ,i.oce(li»’® 

g. (1) It is, however, possible to make the cryptographic P 
the same in both encipherment and decipherment, by itt 

in method. 2'liey can both be made either additive or su 
nature, thus requiring the learning of but a single process. 1 ^ 

will be ex|)lained below. . . .jj-oecss 

(2) Both processes additive. If in enciphei'inent an ciU' 

is used, and if in decipherment the complement of the adi 
ployed in encipherment is then added to the encicode gt® ’ 
decipherment also Ijccomes an additive process. For ’ ^jjg 

complement of the group 5678, on a basis of 10, is 5432. I'* 

following: , 


Example 13 

(a) Example of ‘Sioncarrying” addition in encipherment: 

(1) Placode..... 5517 3082 9015 6710 

(2) Fixed group for additiou.... 5678 56'7R ■'^678 56^ — 

(3) Encicode.. 0185 8650 4683 1686 ^ 

(b) In deciphermeut, using tho complement of the additive used in encipliC”* 
addition reproduces the placode: 

Al l9 

( 1 ) Encicode----- oi85 8650 4683 1388 

(2) Complement of fixed group. 5452 543^ 545g^ —^ 

(3) Both 'processes subtractive, —By a very simple cliango iP 
ceduro it is possible to apply subtraction in both enciplicrinoiil 
decipherment, using tho same nnmcrical groups as subtractors, 
making it necessary to learn only one process. If the addil^^^^ 
instead of being in the second line of the three lines shown in 
foregoing examines, is placed on tho first line, and a subtraction 
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5678 

5517 

5678 

3082 

5678 

9015 

5678 

6710 

5678 

9541 

0161 

2696 

6663 

9968 

6137 

5678 

0161 

5678 

2696 

5678 

6663 

5678 

9968 

5678 

6137 

5517 

3082 

9015 

6710 

9541 


^^vherrriMtf^^,’ Piopcr results arc obtained regardless of whether 
lennent is involved. Note the following example: 

. Example C 

W Example Qf V . ,, 

r.v ^ ^i*ro\ving ‘‘subtraction in encipherment and decipherment: 

S .S™ 

(3) Encicodc. .. . 

l^cciphcnnent {mhlracMon also) : " 

,1) Fixed group.. 

Encicodc . 

, ( 3 ) Placode....' 

fc) Note that in tl ' . 

placode as f merit process the keying grouj) serves as the minuend, 

the decipf ''^^^^dr-ahend, whercui)on the remainder becomes tlie encicode; 
encicode lU’ocess the keying group again serves as the minuend, 

^ ^10 subtrahend, whereupon the remainder becomes the placode, 

^^hiss. ex])lanation of this })hcnonicnon may not be 

Processes ^'^P^^^^ntion involves a consideration of the nature of the 
when looked at from the point of view of simple 
y tleiiotcg following, where the symbol x deiiotes placode, 

'0 fixed group, and z denotes encicode: 

A (a)__ 

we’""'-- 

• oille^tl'T ''''' luuV ‘Tluirthis 

^^^Volv(,g I ^ ^oay be a positive quantity. 

' i addition and subtraction. 

But i -- 

. 

. is ov.> . 1 .. 1 n (h) jiencc it is seen that 

cn" Example C ( ^ j involved, in 

this second iuethod only subtiactio. 

e^ocesses. 

h. r> ic becoming more common, 

^ccan«„ '’3^‘rthod illustrated m Examp • it is termed 


. x+y=2 

_ x=z—y 

__. z—y=x 


svhi simplicity and • j rrroups employed as keying 

''^“'lirparagraidi 85 more will be said about 

this , subiractors. I” 

. .„_.kev additives and subtracters.—a. 

the minibcr which was added or subtracted 

true. It is nossiblo to employ a seguence of numbers for addition 
subtraction the sequence being agreed upon in advance or it may 
easily derivkble from a key phrase, etc. Thus, suppose the placode 
message is the same as in the pievious examples and that the repeating 
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key is 43280972] and that this key is oinployod according to thesub- 

tiactor method explained in subparagraph g (3) above. Note the 
foJlowi/ig: 

(a) Ejicipliorinont: 

(1) Hopoating key...... 4328 0972 1432 8097 2143 

(2) Placode--- 5517 3082 9015 6710 9541 


(3) kiicicode_ 9811 

(b) Deciphennont; 

/o\ 4328 

(2] rviicicodo»»_ 9811 

(3) Placode_ 5517 


7990 2427 2387 3602 


0972 

7990 


1432 

2427 


8097 2143 
2387 3602 
3082 9015 6710 9541 


- -- 5527 3082 9015 6710 9541 

6. It is important to note that such a key as the foregoing must 
tiiat (lo(\s not contain a factor in common with the 
r>nr^ ' ^ ^ giviips iiivolvcd ill tJic cncipiiorment, for if it does 

in I if ! <^onnnon factor the period will be abbreviated. For example, 
fbo I case, since the repeating key contains 9 digits and 

irroijos M 'I digits, tJie length of the enciphering period is 9 

apart before'^t/.oT ’^|:"‘''‘;"bJaeo(ie groups must bo at least 9 groups 
the kevincr ^ P^'odnee identical cncicode groups. But if 
cyclic renetiti^*^**'^^'^^! digits in Jength tJiis plicnomcnou of 

li'it 5 groups ToaTt" ‘ 'dcatical pJacodo groups were 

keying lenii, in i’actor 2 cuts tJic potential 

JengtJi the period w' i*^ keying sequence were J2 digits in 

the remarks under ^ ^ ^?^oups. Jn tiiis connection see also 

s ‘»*der paragraph 49c of tJiis text. 










109 


85. 


Nonrepeating additives and subtracters. —a. When special 
tables are employed as the. source, of the udders or subtractoi-s for 
supcrenciplicring code, a much more secure system is provided. The 
tables may be contained in a book or document called a keybook, an 
a^lditive book, or a sublractor book. On each page of such a book 
groups of numbers are regularly disposed in rows and columns on the 
page. By applying identifying symbols called indicators to the pages, 
as well as to the rows and the columns on each page of the keybook, 
IS possible to provide for the safe superencipherment of a large 
VO ume of traflic. All correspondents must, of course, be provided 
ft 1 basic code book and the same keybook. In employing 

0 ccybook the indicators tell the recipient of a message what groups 
CIO used; that is, where to begin in the decipherment of the encicode. 
page from a typical keybook of this sort is sliown in Fig. 48. 
in tliV t>o noted tl.at whether the arbitrary numerical groups 

0 do . ‘=»d>loyed as adders or as snbtmctors noUu g 

used oh. nature of the groups themselves: the atter n ay be 

cuts al "" I”-nvido.d consistency is observed and the 
S mof' '^l‘«ther the groups will be end^Ioyed 

ExampleTVf *'1'® additive manner (in manner illus¬ 
trated in Paragraiih 83e, or this e.xample are 

«hown ^ nosed in numbered blocks 

each contain-^^^ ^ groups, disp designate a 

group affT "^Innms and 10 rows of or decipher- 

aienf '/• ^ 'nitial one to bo employed in f "^^““‘'the row number 
and the lolT^'^^^ 'accessary to give the ”an”pb,’8850 is the indi- 
<^ator for t of group, groups 

in the ? ^ ^*'®op 612G. It is usual to ta the 

fop doCil"'"\ "•’ of reading may be agreed 

upon bTf any other which this example 

wrtal correspomlents. The book ^ ,making 

lOOOn"^" consisted of 50 pages each coi merely of 

, in all. The groups themselves, o preparation. 

■'■S'te seated a, rand^ who., «.o Example B of pa,a- 

back to the method ‘® j both encipherment and 
gaphssp (2), in which addition is employ t comylement of 

Jciphorment. it was noted that m deciidici^ ,rder to re- 

c additive employed in enciphermen preparing 

over the placode. This principle sei’V ^jditives, the other half, 
aeybooks in which half the contents it is possible 

licir complements. By proper mamp i‘a encipherment, 

0 use any given page of the ai complements) must be used 

w icreiipon a specific page f""®” i^viously rcquii'es considerable care 
for decipherment. This method oPviou y 
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0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

0 

1 

2 

3 

4 

5 

6 

7 

8 

9 


0123456789 


5087 5344 0108 3960 3477 2075 0157 5607 3681 1948 

4136 5532 3884 5286 0727 4018 4327 8401 6151 9323 

7870 5086 7021 7165 8280 6303 5325 5241 0376 4739 

5465 6382 7509 8938 8461 0624 4878 6883 1539 5840 

1685 3147 7116 7654 3766 5110 2646 0353 6038 9316 

6126 9524 5178 3818 1458 2915 8753 0134 2848 3217 

6667 2409 6932 7290 1357 7176 7658 8334 4335 5991 

5297 2099 2626 3970 4642 9251 5054 5870 9801 4863 

0367 3693 8875 0822 7694 5742 6178 8259 9987 4765 

6502 8685 4829 3466 2720 0934 6124 9647 4047 8127 


6673 

6979 

4382 

4347 

3812 

9280 

3464 

3789 

9498 

9581 

8625 

8347 

9189 

3619 

4730 

5330 

7359 

2183 

7743 

0419 

3829 

8413 

0541 

0920 

3663 

5733 

2602 

5464 

2740 

9811 

5923 

7427 

1118 

7849 

2558 

3324 

6369 

6663 

3051 

0947 

2153 

4254 

0167 

4467 

3053 

1532 

7762 

4125 

0877 

3334 

8727 

8613 

3244 

2312 

0268 

8549 

8843 

5282 

7259 

1552 

6348 

1810 

4756 

8611 

2590 

2556 

9345 

9112 

4753 

6169 

5378 

6976 

8833 

0935 

2621 

9213 

7674 

3427 

0830 

3896 

0244 

1751 

5242 

8801 

1546 

7680 

4662 

7727 

1866 

2670 

6989 

1418 

9552 

9309 

8664 

FIOVBE 48. 

0187 

3873 

7253 

3260 

9309 
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in prep&ring tiic koybooks, so ns to insure Hint complementary pages 
are present and are properly indicated; it also involves much more 
care to insure that the groups on complementary ])ages arc accurate, 
although there are mechanical methods of preparing scries of com¬ 
plements of this type. 

d. If a keybook for an additive or a subtractor system is used once 
and only oTice, security of an al)solute order is imparted to the messages 
even if the basic cods book is known, to and possessed by the enemy. It is 
not even necessary to use indicators except where a question may 
arise as to the serial order of one of two or more messages arriving at 
about the same time. In such a case the system is referred to as a 
one-time system and the keybook is called a one-time pad because the 
pages are usually fastened securely in the form of a tablet or pad and 
are destroyed as soon as it is certain that the recipient of a message 
has properly dcci])hered and decoded it. The disadvantages of such 
a system are two in number, both very serious. In the first place the 
production and distribution of the pads ])resont very difiicidt problems 
in composition, printing, assembly of sheets, etc. For voluminous 
correspondence many pads arc necessary and the mere question of 
the production, timely distrilnition, and proper safekeeping of the 
pads is a serious one. In the second place, a system such as this is 
suitable for only two correspondents and even in this case there usually 
must be two pads, one for incoming, the other for outgoing messages, 
otherwise it will occasionally or frequently happen that both corre¬ 
spondents will use the same scries of additives or siditractors. 

g The foi'cgoing difficulties make it desirable to modify the system 
so that while its security may not bo absolute it can be employed by a 
larger number of coiTcspondents, cutting down on the number of pads 
required and permitting of intercommunication among all correspond¬ 
ents ‘adicators are absolutely essential in order to 

facilitate the prompt decipherment of messages received from several 
different correspondents, 

, security of a scheme such as the foregoing is dependent 

' "n the manner in which the indicatoi’s are treated in the crypto- 
hing processes. If the indicators are given in clear, that is, 
without disguise of one sort or another, it becomes possible to study a 


. encicodo messages and perhaps to solve them, even without 

ion of the code. On the other hand, if the indicators are 
P®®®® Ives disguised by enciphering them according to a well-designed 
j the system as a whole becomes very secure and may, indeed, 
nde impnignable against attack for a very long time 
be (Concluding remarks on arithmetical methods, a. Ihe 
t has no doubt perceived by this time that the fmegoing 
^‘^'^^^etical methods arc, in reality, substitution methods. Where a 
^roup is added or subtracted from the placode group this is easy 
fixed S’ 
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to see. For example, if the fixed additive is 3080 and the placode 
group is 8752, the encicode group is 1731, This is the same as saying 
that a 4-alphal)ct system is involved, and the alphabets are as follows; 


Placode- 


1 

2 

3 

4 

5 

6 

CO 

9 

0 


1 1 

4 

5 

6 

7 

8 

9 

0 1 

2 

3 ' 

Alphabet No. < 

1 2 

3 

1 

9 

2 

0 

3 

1 

4 

2 

5 

3 

6 

4 

7 8 

5 6 

9 

7 

0 

8 


4 

0 

1 

2 

3 

4 

5 

6 7 

8 

9 j 


'^Cipher'^ 


Note that merely a simple cyclic disidacement of values is involved in 
the |)rocess, the amount of displacement being governed by the par¬ 
ticular digit in each position of the additive group. Wliat this 
amounts to, in cryj)tographic terms, is a 4-alphabet encipherment 
using direct standard alphabets, where the ^Vnormal alphabet'^ is 
1 2 3 4 5 6 7 8 9 0. The process could be made more difficult by em¬ 
ploying ^^mixed alphabets’^ of course, but then the feature of speed, 
which is now possible (in view of our early training in addition, 
whereby the mental arithmetic involved becomes second nature), 
would be lost, since constant reference would have to be made to 
encipliering and deciphering tables. 

b. It becomes clear that when a series of different additives or sub- 
tractors is used, as when a keybook is employed, then the number of 
alphabets involved corres[)onds to the number of digits employed, 
''riius, despite the fact that the encipherment process is here one that 
involves merely the numerical equivalents of direct standard alpha¬ 
bets, the system can have great cryptograj)hic security, depending 
upon (1) how long the keying sequence is, that is, the number of 
groups comprising the additive or subtractor series; (2) the composi¬ 
tion of this keying sequence, that is, whether it consists of random 
digits or is systematic in its construction; and (3) whether this sequence 
or parts of it are used only once or several times. The last-mentioned 
factor is the most important of the three, for if the keying sequence or 
parts of it are used but once or a very limited number of times, say 
2 or 3, its recovery by cryptanalytic processes is difficult or impossible 
and therefore even if the sequence is systematic in its construction 
this fact might not become known. However, as a rule the additives 
or subtractors arc merely digits selected by a purely random means, 
such as drawing them out of a box, or equivalent means. The length 
of the sequence is guided only by the amount of traffic to be superen- 
ciphered; for a voluminous traffic, keybooks containing thousands of 
groups are necessary, even with a good indicator system, and even 
then the books must be changed at frequent intervals, 
c. Arithmetical methods are today very frequently employed and 
other methods of superencipherment because 
o eir simplicity and relatively better speed of operation than in 
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the case of alphabetical mcihocls. The speed factor is, of courses 
attributable to the fact that practically everybody can add (or 
subtract) rapidly and accurately when sinp;le dibits are involved, and 
although very similar processe's could be applied in cryptogi'aphie 
processes involving letters of the alphabet, the operations of addition ^ 
or subtraction would proceed very much more slowly because our 
early training does not devote any time to arithmetical processes 
involving letters. For example, every child learns that “8 plus 5 
equals 13’^ but none learns that “11 plus E e(puds M.” 

d. However, these arithmetical methods have two serious disad¬ 
vantages. First, there is the disadvantage that the final encicode 
text is composed of numbers. The latter are not only more subject to 
eiTors in telegraphic handling than are letters, but also it is more 
difficult to correct garbled groups when figures are involved than when 
letters are involved. These disadvantages are, it must he admitted, 
more serious in American practice, when emphasis in training is laid 
upon the telcgi’aphic transmission of letters and not figures than they 
arc in other practices; they may not hold in regard to countries where 
the emphasis in training is in the other direction, figures being pre¬ 
ferred to letters. Second, the physical procedures involved in the 
preparation, reproduction, distribution, and accounting of the neces¬ 
sary keybooks of adders or sub tractors are tedious, costly, and time 
consuming. Where provision must be made for voluminous inter¬ 
communication among many units and for relatively-long periods of 
time, these matters constitute a difficult if not impossible problem 
for the compiling agency. 

o 


I 




